CheckIT Technologies
AI-powered invoice verification and bid leveling platform for construction finance and margin protection.
checkitapps.comEnterprise evidence
Insufficient enterprise evidencePublic information covers access controls, auditability, reliability & support. Still unresolved: security assurance, sso & provisioning, data handling.
5 official sources · Fresh page review · Not independently tested
Sources reviewed 2026-10-28
3 / 7 areas with published evidence · 0 independently verified
Evidence & checks
Security assuranceNeeds clarification
CheckIT implements and maintains safeguards designed in alignment with SOC 2 and ISO/IEC 27001 principles, including at a minimum:Reviewed 2026-10-28View source
- Physical Security: Cloud data centers operated by certified providers (SOC 2 Type II, ISO 27001).Reviewed 2026-10-28View source
Before relying on it
Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.
SSO & provisioningNot found
Before relying on it
Test SSO enforcement, user removal and privileged-account recovery.
Access controlsCompany-published
- Access Control: Role-based access; least-privilege provisioning; mandatory MFA for administrative access; periodic access reviews.Reviewed 2026-10-28View source
Before relying on it
Test least-privilege roles and cross-tenant access with separate test accounts.
AuditabilityCompany-published
- Logging and Monitoring: Audit logs retained for at least 12 months; continuous security monitoring.Reviewed 2026-10-28View source
Before relying on it
Verify administrative and data-access events, retention and export.
Data handlingMixed claims — review
This Data Processing Agreement (" DPA") is entered into between CheckIT Technologies Inc., a Delaware corporation, 144 Via Bandolero, Arroyo Grande, CA 93420 ("CheckIT," "Processor," or "Service Provider"), and the subscribing customer ("Customer," "Business," or "Controller") that has accepted the CheckIT Terms of Service or signed an Order referencing this DPA (the "Agreement").Reviewed 2026-10-28View source
This DPA supplements and is incorporated by reference into the Agreement.Reviewed 2026-10-28View source
Questions about our subprocessors or data practices?Reviewed 2026-10-28View source
Before relying on it
Review DPA, subprocessors, retention, deletion, residency and AI training use.
Reliability & supportCompany-published
- Incident Response: Documented plan with defined roles, escalation, and notification procedures, tested at least annually.Reviewed 2026-10-28View source
Before relying on it
Request SLA, incident history, recovery targets and support escalation terms.
Product effectivenessNot found
Before relying on it
Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.
Published claims are not verified controls. No hands-on performance or security testing has been performed.
What we know
Offers invoice verification against quotes, contracts, and change orders; generally available.
Worth asking
Focuses on materials intelligence gap; lacks evidence of broad enterprise-grade security certifications.
Sources
Evidence details
Enterprise controls
- Physical Security: Cloud data centers operated by certified providers (SOC 2 Type II, ISO 27001)
Developer access
API availability has not been verified.
Last checked Oct 28, 2026
Company-published evidence, not an independent audit. Unknown means unverified.