Security & trust

Your spend data, protected.

Groundley reads some of the most sensitive data a business has. We treat it that way. Here is exactly how we keep it safe.

How we protect your data

Your data stays in the EU

All customer data is hosted in the EU. It does not leave the region.

Encrypted end to end

Data is encrypted in transit and at rest, at every step.

Microsoft single sign-on

Log in with your existing Microsoft identity. No separate password to manage.

Read-only ERP access

We only read your invoice and purchase data. Groundley never writes back to or changes anything in your systems.

Audit logging

Every action is logged, so there is always a clear record of who did what and when.

Automatic backups

Your data is backed up automatically, so nothing is lost.

Compliance

Built to enterprise standards, from day one.

We run structured security practices today, and we are on the path to formal certification. We are committed to ISO 27001 in 2027, and we handle personal data in line with the GDPR.

Questions from your security team?

We are happy to walk your IT and security people through exactly how Groundley connects, what we access, and where your data lives.

Speak to an expert →