SALEGRID
Security
Built for controlled field collections.
SaleGrid helps distributors reduce cash leakage and ledger confusion by keeping collection workflows visible, permissioned, and reviewable.
Last updated: July 5, 2026
Security Scope
- This Security Policy describes the safeguards and responsibilities related to SaleGrid accounts, operational data, field workflows, reports, exports, and admin approval activity.
- Security is a shared responsibility between SaleGrid and the customer. SaleGrid protects the service infrastructure and product controls; customers must protect their users, devices, passwords, permissions, and internal processes.
- No security program can eliminate all risk. We apply reasonable safeguards and continuously improve controls based on product, operational, and legal requirements.
Access Control
- SaleGrid is designed around controlled user access for admins, office teams, and field users.
- Admin approval flows help prevent unverified collections, DND entries, order changes, and ledger postings from moving directly into final records.
- Customers should assign only the permissions each user needs and promptly remove access for users who leave the business.
- Customers are responsible for reviewing user access regularly, preventing shared admin credentials, and ensuring that field users only access authorized beats, parties, and collection records.
- Where available, customers should use role-based access, approval controls, audit review, and strong credential practices.
Data Protection
- Operational data is used to run SaleGrid workflows, generate reports, support exports, and keep collection activity traceable.
- We apply reasonable technical and organizational measures to protect data from unauthorized access, misuse, loss, or alteration.
- Sensitive operational workflows such as cash collection, payment slips, party balances, and ledger updates should always be reviewed by authorized admins.
- Access to production systems is limited to authorized personnel and service providers who need access for operations, support, maintenance, or security purposes.
- Customer data should not be exported, downloaded, or shared outside the organization unless authorized by the customer and permitted by applicable law.
Monitoring And Reliability
- System activity, logs, and technical events may be monitored to detect failures, abuse, security risks, and performance issues.
- We use this information to maintain service reliability, investigate incidents, improve workflows, and protect customer accounts.
- Customers are encouraged to review reports, reconcile balances, and investigate unusual collection patterns quickly.
- Audit trails, timestamps, approval records, device events, and usage logs may be used to investigate suspected fraud, misuse, errors, unauthorized access, or operational disputes.
- Service availability may depend on hosting providers, networks, customer devices, messaging providers, accounting systems, and other third-party services.
Incident Handling
- If we identify a security incident affecting customer data or service integrity, we will take reasonable steps to investigate, contain, remediate, and communicate as appropriate.
- Customers must promptly report suspected unauthorized access, compromised credentials, suspicious collection activity, incorrect postings, or fraudulent use.
- Customers agree to cooperate with reasonable security investigations, including user access review, log review, credential resets, and corrective workflow actions.
Integrations And Communication Channels
- SaleGrid may connect with communication, reporting, export, accounting, or messaging workflows configured by the customer.
- Customers are responsible for verifying third-party account access, destination accuracy, recipient permissions, and export settings before sending data outside SaleGrid.
- We are not responsible for security, availability, retention, or handling of data after it has been transmitted to third-party tools, messaging apps, accounting systems, or customer-controlled destinations.
Customer Responsibilities
- Use strong passwords, protect devices, manage user roles, and avoid sharing admin accounts.
- Verify collection entries, payment slips, ledger changes, and exports before relying on them for accounting or compliance.
- Report suspected unauthorized access, incorrect postings, fraud attempts, or security issues as soon as possible.
- Train field and office users to follow internal collection controls, verify party balances, protect customer data, and escalate suspicious activity.
- Maintain independent backups, reconciliations, accounting checks, and business continuity procedures appropriate for your organization.
If you believe you have found a security issue, report it through your official SaleGrid support or onboarding contact with enough detail for investigation.