Security and sign-in
Two-factor sign-in for every user from the first login, tenant isolation at the database layer, an audit log of every send, approval and acceptance, and data held in a US Azure region.
Two-factor from the first sign-in
Every user sets up a text message code or an authenticator app at the first login. There is no option to skip it. Backup codes cover a lost phone.
Optional passkeys
Users can add a passkey for faster sign-in. Passkeys are never required.
Roles
Each user has a role in your workspace that controls what they can see and do. Approvers do not need a paid seat.
Tenant isolation
One database, a tenants table and a tenant ID on every tenant-owned record, with database row-level security as a second layer.
Audit log
Sends, approvals, acceptances, budget changes and AI changes are recorded with who and when.
Immutable sent snapshots
Sending freezes a hashed snapshot and PDF, so the version the client accepted can always be reproduced.
Infrastructure
Feebeaver runs on Azure App Service with Azure SQL in a US region. Billing runs through Stripe; Feebeaver does not store card numbers. Transactional email is sent from feebeaver.com domains.
Security overview, export and deletion
Workspace administrators see a security overview and can request a data export or deletion from workspace settings. See data export and deletion in the help center.
What we do not claim
Feebeaver is launching the week of November 30, 2026. We have not completed a SOC 2 audit and do not claim HIPAA compliance. We will update this page when either changes rather than hedge it.
Reporting a security issue
If you believe you have found a security issue, tell us through the contact page or email support@feebeaver.com.
Security questions
Can a user skip two-factor sign-in?
No. Every user sets up two-factor at the first sign-in, using a text message code or an authenticator app.
Are passkeys required?
No. Passkeys are an optional addition to two-factor sign-in.
Where is our data stored?
In Azure SQL in a US region, on Azure App Service. Markets outside the US are not supported at launch.
How is our data separated from other firms' data?
Every tenant-owned record carries a tenant ID, and database row-level security enforces the boundary as a second layer. Tenant isolation is non-negotiable in the product design.
Can we export or delete our data?
Yes. Data export and deletion requests are made from the workspace settings.
Is Feebeaver SOC 2 certified?
Not at launch. Feebeaver is a new product launching in late 2026 and has not yet completed a SOC 2 audit. We will publish the status here when it changes.
Feebeaver launches the week of November 30, 2026
Get early access and we will email you when sign-up opens. 14-day free trial, no card required.