Book a demo

Your costs staywith the right people.

Supplier costs, margins and customer lists are the most sensitive figures a sales team holds. Here is what protects them today, and what is not in place yet.

SMNKSara Al MansooriNeha Kapoorsara@gulfpearl.exampleneha@malabarpearl.exampleAdmin

Code from your authenticator app

Two-factor sign-in required for adminsA company setting. Every user can turn on TOTP codes.
  • Each sign-in token works once. If an old token is used again, Rekozo ends the session.
  • Idle timeout. A session ends after a period with no activity.

What happens when a rep opens a quote.

Rekozo calculates every figure on the server. Before the response leaves, the server removes cost, profit and margin for anyone without cost permission.

1 The browser asks

RMRahul MenonSales rep

GET quote Q-2026-0418

Signed in with two-factor

2 The server calculates

Rekozo server, Central India

Net
17,584.503,99,095.00
VAT 5%
879.22
CGST 9%
35,918.55
SGST 9%
35,918.55
Total
18,463.724,70,932.10
Cost
12,832.002,91,400.00
Gross profit
4,752.501,07,695.00
Margin
27.0%

3 Cost fields are removed

Cost permissionOff for Sales rep

  • CostRemoved
  • Gross profitRemoved
  • MarginRemoved

Before the response leaves Rekozo

SMNKSara Al MansooriNeha KapoorSales manager, cost permission on
Total
AED 18,463.72INR 4,70,932.10
Cost
AED 12,832.00INR 2,91,400.00
Gross profit
AED 4,752.50INR 1,07,695.00
Margin27.0%

Approval line 22%

RMRahul MenonSales rep, no cost permission
Total
AED 18,463.72INR 4,70,932.10

Cost, profit and margin are not sent to this browser. Nothing is hidden in the page.

The rep still quotes, sends and follows up.

Each company's data is kept apart.

Tenant isolation works at three layers. A record from another company returns "not found", even with the right link.

PNPriya Nair, Gulf Pearl TradingMalabar Pearl TradingGET customer 8841Another company's record

  1. 1Query filterEvery read adds the signed-in company. Other rows never load.
  2. 2Company stampThe server sets the company on each new record. The browser cannot.
  3. 3Update checkEvery save names the company. A save for another company stops.

404 Not foundThe record is outside this company, so Rekozo says it does not exist.

Conflict check on every write

SMNKSaraNeha saved Q-2026-0431Version 7, 14:32Saved
PNPriya saves from version 614:34Stopped

This quote changed after you opened it.

Sara Al MansooriNeha Kapoor saved a new version at 14:32. Review her change before you save.

Review the change

The first save is never overwritten without a choice.

Roles decide who sees cost. The history keeps every change.

Permissions are settings you control, not fixed job titles. Switch one off, and the change history records who changed it, when, and the value before and after.

Roles and permissionsSaved
PermissionSales repManagerAccountsOps
View and edit quotes
View cost and margin
Approve quotes
Record payment
Move orders
Data scopeOwnTeamCompanyCompany
Change historyExport
  1. SMNKView cost and marginRole: Sales rep, Sara Al MansooriNeha KapoorOnOffJust now
  2. PNMargin belowSettings: Approvals, Priya Nair18%22%10 Nov, 11:05
  3. OHData scopeUser: Rahul Menon, Omar HaddadOmkar HegdeTeamOwn09 Nov, 17:48
  4. RMTwo-factorSign-in, Rahul MenonOffOn09 Nov, 09:12

Kept for 12 months. Append-only: entries cannot be edited or deleted.

  • A data scope for each role: own records, the team or the whole company
  • Handover when someone leaves
  • Sign-ins, failed attempts and lockouts are recorded
  • Export the history to Excel

Hosted on Microsoft Azure in Central India.

Rekozo runs in one Azure region. Secrets sit in Azure Key Vault, and backups run every night.

When a rep connects Microsoft 365 or Gmail, the rep signs in with Microsoft or Google. Rekozo never sees the mailbox password.

Azure regionCentral India
  • ApplicationAzure Container Apps
  • DatabaseAzure Database for PostgreSQL, Flexible Server
  • SecretsAzure Key Vault
  • FilesAzure Blob storage
Nightly backup of the database and uploaded files

What is in place.

For every company that uses Rekozo. Security is never an extra.

  • Cost permission. Reps without cost permission never receive cost data.
  • Tenant isolation at three layers. A query filter, a company stamp and an update check.
  • Conflict check on every write. A second save on an old version stops and asks.
  • Two-factor sign-in. TOTP codes for every user. Required for admins if you choose.
  • Session ends on token reuse. Each sign-in token works once.
  • Idle timeout. A session ends after a period with no activity.
  • 12-month change history. Before and after values. Append-only.
  • Mailbox tokens encrypted. Rekozo never sees the mailbox password.
  • Hosted on Microsoft Azure. Central India. Secrets in Azure Key Vault.
  • Nightly backups. The database and uploaded files.

What is not in place yet.

Rekozo is built by a small team. We list these here so your review starts with the facts.

  • ISO 27001 or SOC 2

    Rekozo holds neither certification.

    Not yet

  • Penetration test

    No independent penetration test has been commissioned.

    Not yet

  • Encryption at rest

    Mailbox tokens are encrypted. Other business records are not encrypted by Rekozo at the application level.

    Not yet

  • Single sign-on

    Sign-in uses an email address, a password and two-factor codes.

    Not yet

Send us your security questions.

We answer questions from your IT adviser in writing. Add them to your demo request, or ask during the demo.

Book a demo

Or start a free trial for 30 days. Every feature, up to 5 users.