Enterprise-grade security for commercial contractors.
Your pricebooks, customer proposals, VAT records, and gross margin ledgers are strictly isolated per tenant and encrypted in transit and at rest.
Strict Workspace & Quote Separation
Every authenticated contractor account (user:email) and sandbox session (x-taraily-client-id) is partitioned into an isolated tenant key. Company names, VAT IDs, IBAN coordinates, and custom quotes never bleed across tenants.
Sealed Digital Signature Certificates
When a customer signs a proposal on /q/[id], Taraily locks the signature canvas, records the signatory's name, UTC/local timestamp, and approved package price incl. VAT, and issues a permanent CERT #TAR-SIG audit record.
PCI-DSS Level 1 via Stripe & Direct SEPA
All card payments and 30% booking deposits are executed on Stripe-hosted TLS 1.3 checkout sessions. High-ticket commercial SEPA transfers settle directly from the client's bank to your corporate IBAN with zero intermediary custody.
HMAC-Signed 6-Digit OTP & HTTP-Only Sessions
Taraily eliminates password reuse vulnerabilities by authenticating contractors via time-bound HMAC-SHA256 6-digit verification codes and httpOnly, SameSite=Lax signed session cookies.
Need a signed GDPR Data Processing Addendum (DPA) or security questionnaire?
Our Vilnius engineering and compliance team responds within 24 business hours.