Security
CommissionOps processes payroll-adjacent financial data. We take that seriously. This page explains how we protect your data, where it lives, and what controls are in place.
CommissionOps runs entirely on Microsoft Azure, one of the world's leading enterprise cloud platforms, trusted by banks, healthcare systems, and governments worldwide. Azure provides:
Every workspace is fully isolated at the data layer. Your deals, reps, plans, and commission runs are never visible to — or queryable by — any other organisation. Isolation is enforced by the database engine on every query, not just in application logic.
Even in the event of a misconfigured API call or application bug, cross-tenant data leakage is structurally prevented at the persistence layer.
Once a commission run is locked, it becomes permanent and tamper-proof. No admin, no support staff, and no automated process can edit or delete a locked run.
This means approved payouts stay exactly as approved — creating an auditable record that Finance, HR, and reps can all rely on. It also protects against accidental changes after payroll has been processed.
CommissionOps uses magic-link authentication — no passwords to steal, reuse, or leak. Each sign-in link is single-use and expires in 15 minutes. Sessions are managed via short-lived signed tokens stored in secure, HTTP-only cookies.
For full details, see our Privacy Policy.
If you have specific security requirements, are conducting a vendor assessment, or need to report a vulnerability, reach out directly.
hello@commissionops.io →