What your security and procurement teams need to know
The practical information your security, legal, finance, and procurement teams may need: how we access and handle your data, what each service reads, how we contract and invoice, and what is still in progress.
Current controls
How we access and handle your data on every engagement.
Scoped access
Cloud reviews use scoped, read-only access to billing and configuration data. Your team reviews and applies every change.
Customer-specific data handling
Customer uploads use customer-specific links and storage. Files are used only for the engagement. Retention and deletion details are stated for each service.
How uploads are protectedSecurity review support
We sign your NDA before access or data is shared, provide the roles and policies in advance, and can complete your security questionnaire.
Access by service
What each service needs to read. Each service page lists the details under Access and security.
Cloud Cost Audit
We need to read your cloud configuration and billing data. We never need to change anything, and you can remove our access at any time.
FinOps-as-a-Service
The retainer uses the same read-only, keyless access as the audit. We prepare changes; your team approves and applies them.
Commitment Management
Commitment management needs billing and recommendation data only. Buying stays with you.
Cloud and AI Invoice Reconciliation
Read-only, always. We check and draft; your team decides what to claim and sends it.
Cloud and AI Invoice Back Audit
Read-only, always. We check and draft; your team decides what to claim and sends it.
BigQuery and Databricks Cost Audit
We read job, query and cluster metadata. We never read the data in your tables, and we never delete anything.
BigQuery Cost Guardrails Setup
We read job, table and quota metadata. We never read the data in your tables, and we never hold permission to change a quota, a table, an alert or a budget.
BigQuery Slot Management
We read job, reservation and commitment metadata. We never read the data in your tables, and we never hold permission to change a reservation or buy a commitment.
Portfolio Cloud Cost Optimization
Built for a portfolio: each company's data kept apart, each company in control of its own access, and the portfolio view shared only with the people you name.
Startup Cloud Credits Manager
We read billing totals and credit records. We never read your application data, and we can never change anything in your cloud accounts or your credits.
FinOps Training
Training needs no access to your cloud accounts. Everything runs on exported files you choose to share.
Contracting and payment
Clear contracting
A one-page order confirms the package, scope, dates, price, and invoice milestones before work starts.
Corporate purchasing
Nothing is paid upfront. Invoices can be paid by card or bank transfer, and we can work with a purchase order.
Programs in progress
Compliance program status
Our SOC 2 program is in progress.
Sending a questionnaire, NDA or vendor form?
Email info@finitizer.com with what your team needs, or book a short call to walk through it.
Book an introductory call