Security & Trade Margin Architecture
Last Security Review: October 14, 2026
Trade Margin Firewalls
Wholesale discounts and studio markups are filtered at the database level before reaching client portals.
End-to-End Encryption
TLS 1.3 encryption for data in transit and AES-256 for all stored database records and project assets.
Redundant Backups
Continuous point-in-time recovery with geographically separated multi-region backup replication.
Confidential Trade Margin Protection Architecture
In premier interior architecture, sharing raw spreadsheets with clients or general contractors poses an unacceptable financial risk: formula leaks can expose confidential trade pricing, supplier discounts, and studio procurement fees.
Krevio eliminates this exposure via architectural database firewalls:
- Server-Side Financial Redaction: When a client views a live portal or downloads a presentation, the API strips trade net columns before serialization. Sensitive figures are never transmitted to the client's device or browser DOM.
- Contractor-Grade PDF Sanitization: Tear sheets and finish schedules compiled for trade contractors exclude budget totals and margin percentages automatically.
- Multi-Tier Studio Permissions: Studio Principals can designate which junior designers, project architects, or external accountants have access to view or modify trade markups.
Infrastructure & Cloud Security
Krevio Design is deployed on world-class, ISO 27001, SOC 1, SOC 2, and SOC 3 compliant cloud infrastructure with 99.9% uptime Service Level Objectives:
- Isolated Multi-Tenancy: Logical partition boundaries ensure that no studio can access or query another studio’s database records.
- Global CDN & Edge Protection: Edge networks protect against Distributed Denial of Service (DDoS) attacks and ensure rapid visual asset delivery worldwide.
- Automated Vulnerability Scanning: Continuous automated security assessments scan code dependencies and runtime containers for zero-day vulnerabilities.
Client Sign-Offs & Audit Logs
To protect studios from client scope disputes and unauthorized specification changes, Krevio implements tamper-evident audit logging:
- Every client approval, rejection, or feedback comment generates an immutable audit entry with timestamp and IP verification.
- Modifications to line-item dimensions, fabric selections, and finish codes are logged with user attribution.
- Exportable change logs provide definitive proof of approval for trade ordering and manufacturer purchase orders.
Vulnerability Disclosure & Security Contact
We value collaboration with security researchers and professional practitioners to keep our platform secure. If you have identified a vulnerability or have a security question, please reach out to us directly:
Security & Vulnerability Reports
designer@krevio.design