Security

Committed to your security.

Security is about building trust across everything we do. Cledara offers the latest technology and processes to keep your data and software payments safe and compliant. Welcome to the new way of managing software.

Cledara Agent: built so IT can say yes

Cledara Agent signs in to the SaaS and AI tools you connect to collect invoices, set up joiners, take back unused seats and remove leavers. This is how it's kept in check.

Verified by Cloudflare

The only SaaS management agent verified by Cloudflare

Cledara Agent is listed as a verified agent in Cloudflare's bot directory. It signs its requests using Web Bot Auth, so the sites it works in can check that a request really comes from Cledara.

See the Cloudflare listing

Passwords never seen by AI

The sign-in details you give it are stored encrypted, in a separate vault for your company. AI never sees your passwords.

Only the tools you connect

It never signs in to a tool you haven't connected, and only does the jobs you switch on.

Nothing changes without approval

Approve each change, or set a standing approval for routine work like removing leavers.

SOC 2 Type II certified

Independently audited security and data protection, and GDPR compliant.

Cledara Agent will never:

  • Change your account settings
  • Add a paid seat without your approval
  • Touch a tool you haven't connected
  • Let AI see your passwords. They stay in a secure vault.
See Cledara Agent

How we do it

The safest virtual card technology

Cledara’s virtual cards are issued by Mastercard and tokenized by industry leaders Very Good Security and MeaWallet, the safest security standard for a virtual card. Unlike virtual cards from other providers, tokenized virtual cards are not identified by a PAN. They are instead identified by a token that only the cardholder can use to accessits card details.

That allows Cledara’s customers to benefit from more secure cards and safer software payments.

Our standards

Highest security standards

Information Security and Vendor Outsourcing

That allows Cledara’s customers to benefit from more secure cards and safer software payments.

Data Privacy & Security

Cledara is fully compliant with the GDPR legislation.

Card Data

Cledara doesn’t handle card data whatsoever. All card data is tokenized and only accessible by cardholders.

SOC 2 Certified

Cledara is SOC 2 Type II certified, the industry-leading standard for security and data protection.

Infrastructure

Best-in-class infrastructure

Cledara works with Mastercard and Plaid among others to provide the highest payments standards.We also work with Alloy to ensure that your experience and that of all our customers is safe, secure and compliant with financial regulations.

Stay safe at all times

Designed with your safety in mind

Tokenization technology: Our tokenized cards keep your card details with you at all times. Neither Cledara nor any other third party has access at any time.

Top hosting security: Cledara is built and hosted exclusively on Amazon Web Services (AWS) which is accredited to ISO/IEC 27001:2013, SSAE 16 SOC 1, SOC 2 Type 2, PCI Level 1, FISMA Moderate and SOX.

Regular security reviews: We subject our system to regular security reviews including active penetration testing.

Your data is yours: We do not sell any de-anonymized data and do not share data to the extent permissible by law and regulation.

Your money is yours: For customers located in Europe, when you add funds to Cledara, they remain in your Cledara account in your name. Neither Cledara nor any third party is able to access or lend against your funds.