Built for public-sector scrutiny
Risk registers hold sensitive information about your programs, vendors and systems. Here is how Pelypso keeps it in the right hands.
Pelypso runs on Cloudflare's network. Data is encrypted in transit and at rest. Every organization's data is kept separate, and Command customers get a dedicated database.
People sign in with their organization's account through single sign-on. Administrators can require multi-factor sign-in and choose when people are signed out.
Field Team, Mission Lead, Central Command and Administrator roles each see only what they need. Role permissions are switches an Administrator controls.
Pelypso schedules a review of who has access to what, every 90 days by default, and flags inactive and external accounts to suspend.
Every change to people, permissions, structure and settings is recorded. Entries can't be edited or deleted, and Command customers can export the trail.
Vendors and contractors see only the operations their host shares. They never see cost estimates, security risks or Command's decisions, and their access can end on a set date.
Restore points roll the whole workspace back to any moment in the last 30 days. Administrators can export everything at any time.
We don't sell your information, use it for advertising, or use it to train artificial intelligence models. See the privacy notice.
Pelypso's Terms of Use ask people never to put passwords, keys or account numbers in a report, and to report that a secret was shared rather than the secret itself.
Found a security problem?
Please tell us, and don't share it publicly until we've had a chance to fix it. Good-faith reports are welcome and appreciated.
info@pelypso.com