A control plane holds a map of your estate. Here is how that map is held.

Every customer-owned table is scoped to the organisation from the session, never from the request, and the platform refuses a query that forgets. Twelve customer roles enforced in the service layer; a permission you lack answers as if the page did not exist.

Sign-in is by emailed single-use link; there is no password to leak. Support access by ArcSystemsTechnology is explicit, time-bound, logged, and visible to your administrators with its reason.

Every privileged action writes an audit event your administrators and auditors can read, with the changed fields before and after.

The service and its storage run in Europe (EU West), with encrypted, verified backups shipped off-site daily and a restore that is rehearsed, not assumed. Connector credentials are held by reference and resolved for one read; no secret is ever shown on a screen.

ArcConverge does not hold a third-party security certification at this stage, and this page will say so until it does. The data processing agreement, the sub-processor register and the retention schedule are sent with every proposal.