Security and Trust

Speedy Labs builds AI-native rebate and deductions management for distributors and manufacturers. Rebates touch your margin, your supplier relationships, and your GL, so we hold the platform to enterprise standards.

SOC 2 Type II certified

Speedy Labs is SOC 2 Type II certified. Our controls for security, confidentiality, and availability are independently audited on an ongoing basis, not just at a point in time.

Your data stays yours

Every record you send us remains your property, and everything Speedy computes on top of it is exportable: on demand, on a schedule, in formats your team and your ERP can use. No hostage tables, no exit fees, no lock-in by data gravity.

Business continuity

Rebate operations cannot depend on a vendor's fortunes. Our parallel-run onboarding means your existing process stays intact until your team has verified ours matches it, and your data remains fully exportable at all times. You are never asked to burn the boats.

Authentication and access control

SSO and SAML for enterprise identity providers, OAuth 2.0 authorization, role-based and row-level permissions, and comprehensive audit logging. Only the people you authorize see the programs, customers, and margins you scope to them.

Tenant isolation

Your data is isolated from other tenants across our infrastructure. Your supplier terms, pricing, and margins are never visible to, or commingled with, any other customer.

External penetration testing

Independent security firms conduct regular external penetration tests against the platform, and findings are remediated on defined timelines.

Cloud application security

We adhere to Cloud Application Security Assessment (CASA) standards, ensuring our cloud applications meet stringent, independently defined security requirements.

Reliability

The platform is continuously monitored with automated alerting and incident response. Uptime commitments and SLAs are defined in enterprise agreements, and we report against them transparently.