Operational knowledge is one of your organization's most valuable assets. ExactlyHow is designed with layered security, privacy controls and governance features to help protect that information throughout its lifecycle.
The foundational controls protecting your operational knowledge.
Protect data in transit and at rest using modern encryption standards.
Secure account authentication with support for multi-factor authentication.
Role-based permissions ensure users only access what they need.
Operational documentation and attachments remain protected.
Track important actions with activity history and audit capabilities.
Operational knowledge remains available even during employee transitions.
ExactlyHow is designed to preserve institutional knowledge while reducing unnecessary exposure to unauthorized internal or external parties.
Users receive only the permissions necessary for their responsibilities, enforced through strict role-based access controls.
We clearly communicate our implemented controls, planned security improvements, and current compliance status without exaggeration.
Security is never finished. Our defensive posture, tooling, and policies evolve continuously as the platform grows.
Comprehensive controls built directly into the ExactlyHow application to ensure knowledge remains protected and accessible.
Additional verification layer for user logins.
Benefit: Mitigates credential theft.
Secure, time-bound authentication tokens.
Benefit: Reduces session hijacking risks.
Strong hashing and complexity requirements.
Benefit: Protects against brute force attacks.
Can build and maintain operational knowledge.
Benefit: Restricts editing to authorized staff.
Can search and read documented processes.
Benefit: Enables safe organization-wide access.
Manages organization settings and users.
Benefit: Centralizes security governance.
Logical separation of customer workspaces.
Benefit: Prevents cross-tenant data leakage.
Isolated operational knowledge repositories.
Benefit: Maintains data confidentiality.
Continuous oversight of platform health.
Benefit: Ensures high availability.
Real-time alerting for application exceptions.
Benefit: Accelerates incident response.
Immutable logs of administrative actions.
Benefit: Supports compliance reviews.
Customer operational knowledge is protected through layered security controls rather than relying on a single defensive measure.
Customers retain full ownership and rights to their organizational data. ExactlyHow does not claim ownership of your operational knowledge.
Each organization's information remains logically separated at the application level to prevent unauthorized access between tenants.
ExactlyHow is committed to handling customer information responsibly and transparently, adhering to modern privacy principles.
Our support team assists enterprise customers with administrative data exports, deletion requests, and account-related privacy inquiries.
ExactlyHow accurately communicates current certifications and readiness. Compliance claims are updated only after requirements have been satisfied.
ExactlyHow carefully evaluates service providers that support delivery of the platform.
| Service | Purpose | Location | Website |
|---|---|---|---|
| Supabase | Database & Authentication | United States | supabase.com |
| Cloudflare | Application Hosting, CDN & Security | Global (Edge) | cloudflare.com |
| GitHub | Source Code Management | United States | github.com |
| Resend | Transactional Email | United States | resend.com |
Available upon request.
Available upon request.
Available upon request.
Available upon request.
Available when completed.
Shared as certifications become available.
If you believe you have identified a potential security vulnerability, please contact our security team responsibly so we can investigate and resolve the issue.
Start documenting, organizing, searching and transferring operational knowledge with confidence.