For IT Directors
Zero Servers. Zero Headaches.
Your compliance team needs software. You need it to be secure, maintainable, and not another server to babysit. SmartComply is cloud-native SaaS — nothing to install, patch, or back up.
IT / Security Overview
Platform Architecture
| Requirement | Status |
|---|---|
| SOC 2 readiness | In progress |
| TLS 1.3 + AES-256 | Yes |
| Tenant isolation | Row-level |
| On-prem infrastructure | None |
| SSO (Enterprise) | SAML/OIDC |
| Uptime SLA | 99.9% |
Everything Your Security Review Will Ask About
We built SmartComply for regulated environments. The trust center and security packet answer the questions buyers ask during procurement: architecture, access control, vendors, incident response, and SOC 2 readiness.
Security & compliance
- SOC 2-aligned controls
- TLS 1.3 in transit, AES-256 at rest
- Row-level tenant isolation (Nile)
- CROMERR identity proofing (40 CFR 3.2000)
- Immutable audit log — no soft deletes
- RBAC with per-module role scoping
Architecture
- Next.js on Vercel Edge — global CDN
- PostgreSQL (Nile) — multi-tenant by design
- Vercel Blob for document storage
- Sentry for error tracking and performance
- Inngest for background job orchestration
- No VPN, no on-prem, no servers to patch
Integrations & API
- REST API for programmatic access (Professional tier+)
- Lab CSV import and LIMS connector
- GIS integration with parcel and meter data
- Stripe for billing and payment processing
- Email/SMS notification delivery
- Bulk import/export tooling for migrations
User management
- SSO support (Enterprise tier)
- External portals — testers, haulers, FSEs
- Portal users are isolated — no cross-tenant visibility
- No per-seat fees for external submitters
- Configurable RBAC roles per module
- Self-serve onboarding — no IT involvement required
Things You Won't Have To Do
Your Data. Your Control.
SmartComplyis multi-tenant by architecture (Nile), not by shared-database convention. Each tenant's data is physically isolated at the row level. Immutable audit logs mean every change is traceable. Exports are always available — you're never locked in.
Admin / Audit Log
Audit Log
| Event | User | Timestamp |
|---|---|---|
| IU permit updated | jsmith | 2025-12-15 14:23 |
| Test report signed | bjones (tester) | 2025-12-15 13:41 |
| Manifest filed | klee (hauler) | 2025-12-15 11:02 |
| SNC status changed | system (rules engine) | 2025-12-14 23:00 |
Approve It Once. Forget About It.
Cloud-native SaaS that your compliance team can onboard themselves. No tickets. No infrastructure. No ongoing IT burden.