Trust center

Everything your IT and security review needs, on one page

No gate in front of basic facts. The parts that legitimately require an agreement are marked, and you can request them in one step.

Application dataBackupsAttachmentsUser accessAudit logsReports SOC 2 Type II · In-country hosting · Encrypted

Government authorizations

Cleared to run on state government systems

State and federal programs assess a cloud service once and publish the result, so your agency does not have to repeat the work. Here is where Tansi stands.

TX-RAMP Certified. Tansi, TX-RAMP Level 2, certificate ID TX1966255.
Program
Texas Risk and Authorization Management Program (TX-RAMP)
Level
Level 2
Certificate ID
TX1966255
What it covers
Cloud services handling confidential state data for Texas state agencies and public institutions of higher education, assessed against the TX-RAMP control baseline.

A Texas agency can rely on the certification directly rather than running its own assessment. Other states that recognize a reciprocal program are handled case by case — ask us early and we will tell you plainly.

GovRAMP Prime Member badge
Program
GovRAMP (formerly StateRAMP)
Membership
Prime member
Status
Enrolled in the GovRAMP Progressing Security Snapshot Program
What it covers
A structured assessment against GovRAMP security controls, with a GovRAMP advisor, on the path to GovRAMP verification.

Where a state accepts TX-RAMP or another program reciprocally, we will provide the evidence package for it.

FedRAMP logo
Program
Federal Risk and Authorization Management Program (FedRAMP)
Marketplace ID
FR2701247935
Path
FedRAMP 20x
Status
Listed on the FedRAMP Marketplace and working toward FedRAMP 20x certification.

Federal agencies can follow our progress on the Marketplace listing. View Tansi on the FedRAMP Marketplace (opens in a new tab)

Independent audit

AICPA SOC for Service Organizations
SOC 2 Type II
Tansi has completed a SOC 2 Type II audit. The report is available on request.
Live evidence
Our continuously updated trust center holds control evidence, subprocessors, penetration testing status and document requests: Open the live trust center
ISO 27001
In progress.
Penetration testing
Conducted; results available on request.

Hosting and data residency

For United States clients, data is held in United States data centers — and so are the backups. Primary hosting in-country with unconfirmed offshore backup does not meet a residency requirement; it only appears to. It is the question most procurement processes forget to ask, and the one worth asking every vendor first.

Cloud provider
Microsoft Azure.
Primary hosting region
Azure South Central US — San Antonio, Texas.
Backup location
United States.
Encryption in transit
TLS across all connections.
Encryption at rest
Encrypted storage, including backups.
Authentication
Multi-factor authentication available; role-based access control throughout.
Subprocessors
Microsoft Azure, Bitbucket, SendGrid, Twilio and Jira. Current list maintained at Open the live trust center.

Privacy and regulatory posture

  • Student records. Where Tansi holds education records for a school district or institution, it does so as a school official under the district’s direct control, consistent with FERPA.
  • Protected health information. There is no such thing as HIPAA certification, and we will not claim it. Tansi’s controls are built to support a covered entity’s HIPAA obligations, and where your use involves PHI we execute a Business Associate Agreement before deployment. Ask us for it rather than assuming it is in place.
  • State privacy law. Requirements vary by state and several impose their own data handling and breach notification terms. Tell us which state you are in and we will answer against your statute rather than in general terms.
  • Retention and deletion. Retention is configurable, and data is returned and deleted on termination under the terms of the agreement.

Availability and incident response

Backup and recovery
Encrypted cloud backup with documented restore procedures.
Incident notification
Notification commitment stated in the agreement.
Support
Handled in-house. Calls are answered by a person in the United States and reach the people who build and maintain the platform.

Where ERP ends, Tansi begins.

See it running on your own operation

Bring us a workflow that is currently held together by a spreadsheet and a shared drive, and we will show you what it looks like in Tansi. No scripted demo. No discovery fee.