CheckIT Technologies

AI-powered invoice verification and bid leveling platform for construction finance and margin protection.

checkitapps.com

Enterprise evidence

Insufficient enterprise evidence

Public information covers access controls, auditability, reliability & support. Still unresolved: security assurance, sso & provisioning, data handling.

5 official sources · Fresh page review · Not independently tested

Sources reviewed 2026-10-28

3 / 7 areas with published evidence · 0 independently verified

Evidence & checks
Security assuranceNeeds clarification
CheckIT implements and maintains safeguards designed in alignment with SOC 2 and ISO/IEC 27001 principles, including at a minimum:Reviewed 2026-10-28View source
- Physical Security: Cloud data centers operated by certified providers (SOC 2 Type II, ISO 27001).Reviewed 2026-10-28View source

Before relying on it
Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.

SSO & provisioningNot found

Before relying on it
Test SSO enforcement, user removal and privileged-account recovery.

Access controlsCompany-published
- Access Control: Role-based access; least-privilege provisioning; mandatory MFA for administrative access; periodic access reviews.Reviewed 2026-10-28View source

Before relying on it
Test least-privilege roles and cross-tenant access with separate test accounts.

AuditabilityCompany-published
- Logging and Monitoring: Audit logs retained for at least 12 months; continuous security monitoring.Reviewed 2026-10-28View source

Before relying on it
Verify administrative and data-access events, retention and export.

Data handlingMixed claims — review
This Data Processing Agreement (" DPA") is entered into between CheckIT Technologies Inc., a Delaware corporation, 144 Via Bandolero, Arroyo Grande, CA 93420 ("CheckIT," "Processor," or "Service Provider"), and the subscribing customer ("Customer," "Business," or "Controller") that has accepted the CheckIT Terms of Service or signed an Order referencing this DPA (the "Agreement").Reviewed 2026-10-28View source
This DPA supplements and is incorporated by reference into the Agreement.Reviewed 2026-10-28View source
Questions about our subprocessors or data practices?Reviewed 2026-10-28View source

Before relying on it
Review DPA, subprocessors, retention, deletion, residency and AI training use.

Reliability & supportCompany-published
- Incident Response: Documented plan with defined roles, escalation, and notification procedures, tested at least annually.Reviewed 2026-10-28View source

Before relying on it
Request SLA, incident history, recovery targets and support escalation terms.

Product effectivenessNot found

Before relying on it
Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.

Published claims are not verified controls. No hands-on performance or security testing has been performed.

What we know

Offers invoice verification against quotes, contracts, and change orders; generally available.

Worth asking

Focuses on materials intelligence gap; lacks evidence of broad enterprise-grade security certifications.

Sources

Evidence details

Enterprise controls

- Physical Security: Cloud data centers operated by certified providers (SOC 2 Type II, ISO 27001)

Developer access

API availability has not been verified.

Last checked Oct 28, 2026

Company-published evidence, not an independent audit. Unknown means unverified.