Security
A compliance platform has to be trustworthy itself.
Latra holds your policies, your evidence and your people’s records. Here is how it protects them.
Access
- Two-step verification (authenticator app) required by default
- Passwords hashed with scrypt, a memory-hard algorithm
- Sign-in attempts throttled per account and per network address
- Sessions expire after inactivity, and can be signed out everywhere
Isolation
- Every company’s records are separated from every other’s
- Permissions checked on every request, not just in the menu
- Nobody can grant a role with more access than they hold
- Platform staff access to a company is itself recorded
Integrity
- An append-only audit log that cannot be edited or deleted
- Signatures bound to a SHA-256 fingerprint of exactly what was signed
- Completed check records and signed declarations are locked
- File downloads are recorded
Privacy
- Built for Australian businesses and the Privacy Act 1988
- A person’s identity can be erased while keeping the records the business must retain
- No advertising trackers on the platform
- Exports of your own data in standard formats
Questions about security, or need detail for your own due diligence? Get in touch and we’ll answer them directly.