We read your numbers. We never put them at risk.
PyFiOS runs read-only diagnostics on your ERP. Your data stays in the US, is never resold, and stays yours: we keep it secured for as long as it's useful to you, and delete it whenever you ask.
Our security commitments, enforced by how the work is built.
Read-only by design
We connect with read-only credentials. PyFiOS cannot write, edit, or delete a single record in your ERP.
Single-tenant isolation
Your ERP data is processed in a dedicated environment, isolated from other customers. Every deployment runs inside its own cloud network.
US data residency
Your data is stored and processed entirely on US-based infrastructure. It never leaves the designated region.
Encrypted end to end
Data is encrypted in transit with TLS 1.3 and at rest with AES-256, across storage, databases, and backups.
MFA on privileged access
Administrative access to your analysis environment requires multi-factor authentication, using breach-resistant methods that defend against credential theft.
Least-privilege scope
Access is limited to the tables and documents the diagnostic needs, contracts, pricing, rebates, and invoices. Nothing else is touched.
Responsible, human-checked AI
Our AI governance aligns with the OECD AI Principles for trustworthy and responsible AI. Every analysis and recommendation stays subject to human oversight and professional judgment.
Never sold, never trained on
Your data is never sold or shared with third parties, and never used to train, fine-tune, or improve foundation models or LLMs. Full stop.
Kept as long as it's useful
We don't auto-delete. Your data and findings stay secured so you can act on them later, even months down the line. Ask us to purge your data and we do so promptly.
Five steps. None of them let your data leave the room.
Mutual NDA first
We sign a mutual NDA, plus your MSA or DPA, before anything connects.
You control access
You provision scoped, read-only credentials. Prefer not to? Hand us a one-time data export instead.
Isolated environment
We pull only the tables we need into a dedicated, single-tenant, US-based analysis environment.
Analysis stays in place
The diagnostic runs where the data lives. Nothing is copied out or moved off-shore.
Yours to delete, anytime
You decide when your data is purged. Until then it stays in our secured, US-based environment so your findings stay actionable, even if you come back months later for the build.
Questions your IT team will ask.
Do you need write access to our system?
No. PyFiOS operates entirely read-only. We cannot change anything in your ERP, by design.
Where is our data stored?
On US-based cloud infrastructure. It is never processed or stored outside the designated US region.
How long do you keep our data?
As long as it's useful to you. Many clients act on findings months later, so we don't auto-delete. Your data stays in our secured, single-tenant environment until you ask us to purge it, and then we do so promptly.
Is our data used to train AI models?
Never. Your data is not used to train, fine-tune, or improve any foundation model or LLM. AI accelerates our analysis, but every finding stays under human oversight and professional judgment.
Will you sign our NDA, MSA, or DPA?
Yes. We sign a mutual NDA before any connection, and we are happy to complete your MSA, DPA, or security questionnaire.
Can we use a static export instead of live access?
Absolutely. A one-time export of the relevant tables works just as well as a read-only connection.
Do you have formal security certifications?
Our security controls are designed in alignment with the SOC 2 Trust Services Criteria. We are an early-stage team and not formally SOC 2 certified yet, but the controls, read-only access, US residency, TLS 1.3 and AES-256 encryption, single-tenant isolation, and multi-factor administrative access, are all built to that standard.
Have a security questionnaire?
Send it over. We will complete it and answer anything your IT or compliance team needs before we connect.