Data Processing

This page summarizes how FalaStack processes the business data you entrust to it, acting as a processor on your organization's behalf.

What we process

Supplier invoices and their line items, product catalog and supplier records, pricing rules, stores, publishing results, and audit activity — solely to provide the service you request.

Security measures

• Organization-level data separation.
• Role-based access control within each organization.
• Encryption of integration credentials at rest; they are never displayed back.
• Passwords stored only as strong one-way hashes — never in plain text.
• No storage of raw payment-card numbers.
• Audit logging of security- and business-relevant actions.

Sub-processors

We use hosting infrastructure and, when you enable it, an AI provider for invoice reading and the assistant. These sub-processors act on our instructions to run the service.

Your controls

You control who in your organization can view, edit, approve, and publish. You can request export or deletion of your data by contacting support@falastack.com.