Security & Trust
How we protect your business data and keep FoClea secure.
FoClea is built on the Base44 platform, whose infrastructure is independently certified to SOC 2 Type II and ISO 27001 standards. This means the systems that host and run FoClea are regularly audited by independent third parties against rigorous security, availability, and confidentiality controls.
- Encryption in transit & at rest: All data is encrypted over the network using TLS and encrypted while stored.
- Per-user data isolation: Row-Level Security ensures each user can only access their own records. Your plans, KPIs, assessments, and reports are never visible to other customers.
- Authentication: Access is gated behind secure authentication, and permissions are enforced by user role (admin or user).
- Clickjacking protection: The app refuses to load inside another website's iframe, protecting you from spoofed-page and clickjacking attacks.
- Secure backend: Sensitive logic and credentials run on secure backend functions with server-side validation, never exposed to the browser.
You own your data. You can delete individual records (plans, KPIs, assessments, reports) directly within the app at any time. To request full deletion of your account and all associated data (your "right to be forgotten"), email us at support@movingforwardsmallbusiness.com and we will process your request promptly.
Enterprise partners can review certifications and request the SOC 2 report under NDA through the Base44 Trust Center.
Visit the Base44 Trust Center