Security & Infrastructure

Your project data is commercially sensitive. This page sets out, in plain language, how AliraProject keeps it safe — how your workspace is isolated, who can access what, how payments are handled, and what happens to your data if you leave.

Saves a PDF one-pager straight to your downloads, ready to email to procurement.

Your data is isolated to your workspace

Every organisation gets its own workspace, and all project, budget, risk, and resource data is tagged to that workspace.
Isolation is enforced inside the database itself using Row-Level Security, so a user can only ever read or write data belonging to their own organisation — this cannot be bypassed by the application layer.
We test this isolation directly against the database: users from one workspace cannot see or modify another workspace's data, and signed-out visitors cannot read any tenant data.

Encryption

All traffic between your browser and AliraProject is encrypted in transit using TLS.
Data stored in our managed cloud database is encrypted at rest using industry-standard encryption.

Authentication

Sign in with email and password or with your Google account.
Passwords are checked against known breached-password lists (Have I Been Pwned) and weak or compromised passwords are rejected.
Workspaces can enable SAML single sign-on (SSO) so your team signs in with your own identity provider (e.g. Microsoft Entra ID, Okta). Each workspace configures SSO independently from workspace admin settings.

Access control & permissions

Access is role-based. Workspace roles (PMO admin, executive, project manager, viewer) control what each person can see and do.
Project-level roles and per-tab access let you collaborate with contractors or clients on specific parts of a project without exposing everything.
Management reports can be shared via secure, expiring links that respect role restrictions.

Payments

Subscriptions and billing are handled by Paddle, our payment provider. Card details are entered and processed on Paddle's PCI-DSS compliant systems.
AliraProject never sees, stores, or processes your card numbers.

Your data stays yours — you are the Data Controller

You retain exclusive ownership of everything you upload to or create within AliraProject. We never sell it, and we do not use it to train AI models.
Where your data includes personal data about other people, you are the Data Controller and A-Davis Solutions Ltd acts only as your Data Processor, processing it on your instructions to provide the Service.
You are responsible for ensuring the content of your data complies with applicable law before hosting it with us — lawful basis, privacy information to individuals, and handling their rights requests.
AliraProject is a project and portfolio management tool, not a clinical or patient records system. Special category data (e.g. patient or health details) should only be uploaded where you have confirmed it is lawful, and we recommend anonymising or pseudonymising it first. A written Data Processing Agreement is available on request.

Your data, your control

You can export all of your workspace data at any time from the Admin panel — you are never locked in.
If a subscription ends or a trial lapses, your data is retained for 90 days, during which you can export it or reactivate. After 90 days it is permanently deleted. A clear banner in the Admin panel shows your retention status at all times.

Infrastructure

AliraProject runs on managed, enterprise-grade cloud infrastructure with automatic scaling and continuous availability monitoring.
The database is fully managed with automated daily backups provided by the platform.
Application updates are deployed with zero-downtime releases.

Security practices

Independent security scanning runs against the application and database configuration; findings are triaged and addressed, or accepted as intended design.
Sensitive operations (seat management, role changes, data deletion) are restricted server-side to workspace administrators — never enforced in the browser alone.
We follow the principle of least privilege throughout: database functions run with the minimum permissions required.

Questions or security concerns?

If you have a security questionnaire, need more detail for your procurement or IT review, or want to report a security issue, contact us at contact@adavissolutions.com. We take every report seriously and respond promptly.

Last updated: 16 October 2026