01
Authenticated access
Email/password and Google authentication protect application entry, with Firebase App Check for application integrity.
Security and trust
Audit evidence deserves controls as deliberate as the audit.
IABuddy combines authenticated workspaces, role-based access, backend-enforced data rules, change history, and human-reviewed AI workflows. We make only claims that can be supported by the current product and policies.
Verified controls
Designed around sensitive audit work.
02
Role-based permissions
Owner, admin, reviewer, auditor, process/control owner, and member responsibilities gate routes and actions.
03
Backend-enforced rules
Firestore, Storage, and callable-function checks constrain workspace records and files beyond the interface.
04
Audit and review history
Material planning, request, testing, certification, issue, and review events retain who changed what.
05
Human-reviewed AI
AI suggestions and testing output return to explicit apply, edit, rerun, approve, or discard decisions.
06
Customer-data use boundary
Published policy states customer files are used to provide the workflow, not to train public foundation models.
Procurement-ready honesty
Security evaluation should be evidence-led, too.
We do not display unverified certification badges or imply controls that are not documented. Ask for current architecture, policy, data-handling, and subprocessor evidence during your review.
Continue due diligence
Product walkthrough
Bring Security into the product evaluation early.
We’ll walk through access, evidence handling, AI controls, and the exact deployment questions your team needs answered.