1. Home
  2. Security & deployment
Security & deployment

Your firm’s data, on your firm’s instance.

Professional firms hold confidential client information. On Firm and Enterprise plans Firmlytics is deployed one firm per instance, with permissions, approvals and audit trails the firm controls.

01

Dedicated instance

Firm and Enterprise customers run on their own deployment: its own application containers, PostgreSQL database and S3-compatible file storage. Firm data is not co-mingled with other customers.

02

Firm subdomains

Separate surfaces for the main app, HR portal, vendor portal, client portal and careers site, each with its own access rules.

03

Roles and permissions

Firm administrators define roles and permissions and turn modules on or off with module gates.

04

Approval workflows

Configurable approvals for invoices, expenses, procurement, leave and more, with delegation when approvers are away.

05

Audit logs

Administrative activity is recorded in audit logs available to platform and firm administrators.

06

Licensed, signed deployments

Each instance verifies a cryptographically signed licence, and backups and upgrades are run with scripted procedures.

07

Client portal isolation

Client portal sessions are bound to the firm they belong to.

08

AI within permissions

Wisp and DocAI operate within the asking user’s permissions, and firm administrators control access to them.

Questions

Security and hosting.

Does each firm get its own instance?

Firm and Enterprise customers get a dedicated Firmlytics instance with its own database and file storage.

Where is our data hosted?

On the firm’s dedicated deployment. Talk to us about hosting region and infrastructure requirements during evaluation.

Now onboarding firms for 2026–27

Bring your IT and risk team.

We will walk them through deployment, access control, backups and upgrades on a call.