Trust & security
Practical controls for teams using Presel document tools and RFP Manager workspaces.
Access control
Accounts use email/password with verification. Organization Owner / Admin / User roles control invites, billing, and settings. Platform admins may impersonate only for support under internal process.
Workspace isolation
RFPs, knowledge bases, and Drive files can be scoped to an active organization. Personal workspace content stays separate when no org is selected.
Audit & ops
Organization admins can review member/invite/settings activity in the org audit log. Production hosts should enable MySQL (+ storage) backups per the deployment guide.
Subprocessors (summary)
- Application + database hosting on our Ubuntu deployment
- Email delivery when SMTP is configured
- Stripe when billing is enabled (card data stays with Stripe)
- Optional LLM providers you configure for AI features
- Optional error reporting (Sentry) when configured
SSO
Enterprise SAML/OIDC SSO is on the roadmap and scoped via Contact sales — not included in self-serve plans today.