Access boundary
Tenant-scoped users, roles, API keys, and MFA state.
Security
Security designed
for the system your
business runs on.
FullStak keeps CRM, communications, operations, finance, AI, documents, and workflows on one tenant-scoped platform. Access, approvals, integrations, and audit trails stay in the same system.
Architecture, privacy, and review materials are shared during evaluation.
We avoid overstating certifications still in progress.
Shared system
One operating model
with clearer security
boundaries.
Records, workflows, AI, documents, and integrations stay in the same workspace.
Approval required
Automation and AI can pause for human review.
Connection control
OAuth sessions, validation state, and reauth visibility.
Audit visibility
Governance events and document activity stay attributable.
Core idea
One platform means fewer copies and clearer review.
Core records, approvals, documents, integrations, and audit history stay attached to the same workspace.
- One workspace instead of copied data across point tools.
- Access, approvals, and integrations stay in the same operating model.
- Review starts from one system, not a stitched stack.
Key principles
The core security model is simple.
Keep data, access, approvals, and integrations inside one tenant-scoped platform.
Tenant-scoped platform
Core records, documents, AI events, and integrations stay in one workspace.
Access + approvals
Roles, approvals, and sharing boundaries stay explicit.
Audit visibility
Governance events, document activity, and workflow history stay attributable.
Integration control
OAuth state, validation, and reauth stay visible per connection.
MFA / auth
Authenticated access, MFA state, and recovery flows live in the auth layer.
Data ownership
Records, documents, and shares stay attached to the workspace that owns them.
Trust + compliance
Trust signals stay precise.
We keep public claims narrow and share deeper review material directly.
SOC 2 Type II status
In progress. We discuss current controls and roadmap during review.
Privacy baseline
Privacy Policy and Terms are public and form the starting point for review.
Review materials
Architecture, data handling, and onboarding materials are shared during evaluation.
