Security

Acu prepares the work. People make every call.

AcuSpend is built so AI does the legwork and never the deciding. Your data stays inside your workspace, and every consequential step has a person behind it.

Human control

Always a person, never an autopilot.

Acu can structure, search, extract, and recommend. It cannot contact a supplier, select one, or commit you to anything. AcuSpend never places orders or moves money.

  • Contacting a supplier Reviewed by the AcuSpend team
  • Publishing a recommendation Reviewed by the AcuSpend team
  • Selecting a supplier Your decision
  • Approving spend Your workspace owner

Data protection

Your workspace stays yours.

  • Tenant isolation

    Each company's workspace data is separated at the database level with row-level security, and checked again on the server.

  • Private documents

    Quotes and attachments live in private storage and open through short-lived signed links. Supplier files stay private until a staff member marks them safe.

  • Full audit trail

    Activity logs record who did what and when on every request — including document uploads and deletions, without logging their contents.

  • No inbox access

    Supplier replies arrive through a dedicated route. AcuSpend never asks for access to your mailbox.

  • Bot protection

    Sign-up rejects disposable email addresses, and account and public forms use layered checks against automated abuse, including Cloudflare Turnstile.

  • Privacy-first measurement

    Optional analytics stay off until you allow them, and never record your email, request content, or cross-site activity.

Security question or concern? Email support@acuspend.com. How we handle personal data is set out in our Privacy Policy.

Stop chasing quotes.
Start deciding.

Tenant-isolated, RLS-protected, and auditable end to end.