Skip to content
ANTE

Trust center

Security and compliance information for vendor review.

The questions procurement asks before approving a vendor — encryption, data location, audit trail, backup, subprocessors — answered on this page.

How we protect your data

Data encryption

TLS 1.2 or later in transit. Database volumes and backups are encrypted at rest. Passwords are stored only as one-way bcrypt hashes, and credentials, API keys and OAuth tokens are AES-256 field-encrypted.

Daily backups, 30-day retention

All production databases are backed up daily to off-server object storage in Singapore, and kept for 30 days. Each run verifies the dump size and the upload, and failures alert the team.

Authentication

Account lockout (5 failed sign-ins within 15 minutes lock the account for 30 minutes), an email one-time code for new devices, and per-company idle timeouts. Optional sign-in with Google, Facebook or Slack.

Authorization

Role- and scope-based access control on API requests.

Audit trail

An append-only audit log records user and administrator actions with the actor, IP address and before and after values, and is retained for up to 24 months.

Staff access to your data

Multibook does not access workspace data without the customer's request or prior approval. Support can open a user's session only on that basis, with a one-time code issued to our internal security channel, and the access is recorded in the audit log.

Data stored in Singapore

ANTE runs only as a cloud service. Customer Personal Data, including databases, files and backups, is stored in Singapore. In transit it passes through Cloudflare's global network, and some subprocessors listed below (including Cloudflare, Google for push notifications, and our AI subprocessor) process data outside the Philippines. See our Privacy Policy and DPA.

Compliance

We're transparent about what we have and what we don't. No checkmarks for certifications we don't hold.

SOC 2 Type II In progress
ISO 27001-aligned controls Aligned, not certified
GDPR Aligned
Philippine Data Privacy Act (RA 10173) Aligned

Subprocessors

Third-party services we use to operate ANTE. We give workspace administrators 30 days' notice by email before a new subprocessor begins to process customer data, as set out in our Data Processing Addendum.

DigitalOcean Servers, PostgreSQL databases, file and backup storage (Singapore)
Cloudflare DNS, CDN, web application firewall and DDoS protection
Vercel Hosting of the web front-end and this website (no API data stored)
Amazon Web Services (SES) System email such as one-time codes and notifications (Singapore)
Google Sign-In, Calendar (opt-in) and Firebase push notifications
MiniMax System AI provider for Pro AI features (outside the Philippines)
Slack (Salesforce) Internal security alerts. One-time codes for high-risk actions (for example payroll unposting, or deleting all journal entries or the chart of accounts) are issued to Multibook's internal security channel and include the requesting user's name, email and company
GitHub Source code and deployment automation (no customer data stored)

Optional, enabled by the customer

These are used only if a customer connects them.

Slack Sign-in and notification messages, if the customer connects it
Facebook Sign-in, and Page and Messenger CRM integration, if the customer connects it
Multibook ERP connector Syncs journals, partners, items, invoices and reimbursements, if the customer enables it
Customer AI provider OpenAI, Google Gemini, Anthropic Claude, xAI Grok or MiniMax, using the customer's own key
Customer SMTP server Outbound email through the customer's own mail server

Security documentation

Read our detailed security documentation — a security-posture overview plus our access, data-handling, retention and offboarding policies and SLA. Network diagrams and our providers' compliance certifications are available on request.

View security documentation

Report a vulnerability

Security researchers: please disclose privately first. We respond within 2 business days.

security@ante.work

See ANTE in action

See every module. Migrate when you’re ready.

Book a demo and we will walk through ANTE with your own scenarios, then provision your workspace under an order form and help migrate your data.

Guided onboarding Data stored in Singapore Support in Philippine business hours