Pastel holds financial data for many companies at once. That is a responsibility we designed for from the first line of code: encrypted, isolated, audited, and never used to train anyone's models.
SSO, two-factor, and role-based permissions down to the account level. People see exactly what their role allows, nothing more.
Every agent action, every human sign-off, every data access. Logged and reviewable. When an auditor asks how you know, the answer is one click.
AES-256 at rest, TLS 1.3 in transit, keys managed and rotated.
GDPR-ready data handling, data processing agreements on request.
Pastel never trains shared models on your data, never sells it, and supports full export and deletion on request. Each company's data is isolated in its own space; no mixing, ever.
Agents leave receipts. People leave signatures. Every figure can be walked back to its sources, and every action, human or not, is on the record.