Client requests
A private, revocable review link scoped to one project and reviewer.
● ● ○ SECURITY
Your staging link never leaves the building.
The client reviews through Approvela. The origin address and credentials stay server-side, while every request is checked before content is returned.
REQUEST FLOW
They see the review room. They never see the source.
Approvela checks
Session, project access, URL, content policy and current round state.
Safe response
Rewritten content with the origin hostname and credentials concealed.
NINE SAFEGUARDS
Security designed into the workflow.
Tenant isolation
Agency-owned rows are scoped and protected by database row-level security.
Origin protection
Private and unsafe network destinations are rejected; credentials are encrypted at rest.
Revocable access
Review tokens are hashed, expire and can be re-issued while every redemption is audited.
Minimal payment scope
Stripe-hosted elements collect payment data. Approvela never stores card numbers.
Durable evidence
Approvals record the signer, version, time, network context and a numbered receipt.
Scanned uploads
Attachments are held back until a malware scan clears them. If the scanner is unavailable the file stays locked, never served.
Encrypted in transit
Every page and API call is HTTPS-only with HSTS, a per-request content security policy and frame protection.
Complete audit trail
Link redemptions, notes, rounds, payments and approvals are written to a per-project activity log.
Signed webhooks
Every outgoing webhook carries an HMAC-SHA256 signature so your systems can verify it came from Approvela.
COMPLIANCE STATUS
Plain answers for your security review.
Approvela is not yet SOC 2 or ISO 27001 certified, and we will not claim otherwise. Payments run on Stripe, which is PCI DSS Level 1 certified, and hosting runs on Vercel. A Data Processing Addendum, subprocessor register and retention schedule are published, and we will complete reasonable security questionnaires for agency customers. Email security@approvela.com.
A RECORD, NOT A SCREENSHOT
Final approval has a clear, reviewable receipt.
The approval receipt records the signer, version and accepted terms. This sample uses illustrative data only; it is not a live approval.
SIGN-OFF SUMMARY
A clear sign-off record.
The signer, approved version and accepted scope stay together in one clear record.
- Project
- Example website review
- Version
- Final version
- Approver
- Example client
- Receipt
- Illustrative only
DATA AND DISCLOSURE
Named subprocessors. A stated retention schedule. A real security inbox.
The subprocessor register and retention schedule are published in the Privacy Policy. Responsible disclosures are accepted at security@approvela.com.
IT’S NOT OFFICIAL UNTIL IT’S APPROVELA