Governance
Your billing data. Nothing else.
As a startup asking finance and engineering teams to connect billing accounts to us, we want the access boundary to be exactly as narrow as it sounds.
What Technivex can see
- Billing and cost export data
- Resource tags and metadata
- Usage metrics (CPU, storage, requests)
- Account and service hierarchy
What Technivex never touches
- Application code or data stores
- Customer data processed by your services
- Infrastructure configuration beyond billing metadata
- Credentials, secrets, or environment variables
The rest of how we handle your data
Read-only by design
Every cloud integration uses the narrowest IAM policy that still supports cost modeling — never write or admin scopes.
Isolated per-tenant storage
Each customer's cost data is logically isolated and encrypted at rest with AES-256.
Role-based internal access
Employee access to customer billing data is role-gated, logged, and reviewed quarterly.
Working toward SOC 2 Type II
As an early-stage company, we're building our compliance program now, with policies in place from day one.
Want the full access policy writeup?
We share the exact IAM policy JSON and a data-flow diagram during onboarding — just ask.
Thanks — someone will reach out within a business day.