Skip to main content

User and Data Security

We prioritize the protection of your data. Our Excel Add-in ensures data integrity through robust internal and external security measures.

Multi-Layered Security Architecture​

Your data is protected through a comprehensive security framework that combines organizational controls with enterprise-grade cloud infrastructure.

Internal Security: Complete Administrative Control​

Managed Access Through Microsoft 365

  • Single Sign-On (SSO) with Microsoft 365 credentials – Users authenticate using familiar organizational credentials
  • Your Microsoft 365 Administrator maintains complete control over who can access the Excel Add-in
  • Role-based access control ensures that only authorized personnel can access sensitive data and features
  • User rights and permissions are easily assigned, modified, or revoked through your existing Microsoft 365 administration console
  • No separate identity management system to maintain – leverage your existing directory infrastructure

Granular Permission Assignment

  • Control access at the organizational, team, and individual user level
  • Assign specific rights for data access, transaction posting, and reporting
  • Audit trail of all access changes for compliance and governance
  • Immediate revocation of access when employees change roles or leave the organization

External Security: Enterprise-Grade Cloud Protection​

Secure Network Infrastructure

  • The Excel Add-in connects to the STF Network hosted on Microsoft's Azure Cloud, ensuring top-tier security standards
  • All communications are encrypted using industry-standard protocols (TLS/SSL)
  • Data in transit is protected through secure connections with certificate validation
  • No data is stored locally on your device; all information is maintained on secured cloud infrastructure

API-Level Security

  • Unique Client ID and Secret credentials for secure network access
  • Each organization receives dedicated credentials that cannot be reused across multiple deployments
  • Credentials are managed through your organization's security infrastructure
  • Automatic credential rotation capabilities for enhanced security posture

Partner Connection Security

  • Mutual agreements required for all partner connections
  • Each trading partner must authenticate and authorize the connection independently
  • Specific rights are assigned to each partner for data access and transaction permissions
  • Connections can be modified, suspended, or revoked at any time
  • Audit logs track all inter-organizational data exchanges

Data Protection Standards​

  • Encryption at Rest – All data stored in Azure is encrypted using industry-standard encryption
  • Encryption in Transit – All data transmitted between your device and the cloud is encrypted
  • Access Logging – Every data access is logged for audit and compliance purposes
  • Compliance Ready – Infrastructure supports GDPR, SOC 2, and other regulatory frameworks
  • Disaster Recovery – Redundant backups and failover capabilities ensure business continuity

Your Data, Your Control​

With these multi-layered security measures, your data remains secure, and you maintain complete control over access. Your organization's security policies are enforced consistently across all users, and your Microsoft 365 administrator has full visibility and control over the Excel Add-in environment.