# CheckIT Technologies

AI-powered invoice verification and bid leveling platform for construction finance and margin protection.

Research: https://www.safecli.org/company/checkitapps.com
Company: https://checkitapps.com

## Evidence status

Insufficient enterprise evidence
Source review: 2026-10-28T14:03:44.011Z
API: Unknown

Company-published claims, not independently verified controls. Unknown is not evidence of absence.

## Procurement checks

### Security assurance — Needs clarification

> CheckIT implements and maintains safeguards designed in alignment with SOC 2 and ISO/IEC 27001 principles, including at a minimum:

Source: https://checkitapps.com/terms/data-privacy-agreement
Reviewed: 2026-10-28T14:03:44.011Z

> - Physical Security: Cloud data centers operated by certified providers (SOC 2 Type II, ISO 27001).

Source: https://checkitapps.com/terms/data-privacy-agreement
Reviewed: 2026-10-28T14:03:44.011Z

- [ ] Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### SSO & provisioning — Not found


- [ ] Test SSO enforcement, user removal and privileged-account recovery.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Access controls — Company-published

> - Access Control: Role-based access; least-privilege provisioning; mandatory MFA for administrative access; periodic access reviews.

Source: https://checkitapps.com/terms/data-privacy-agreement
Reviewed: 2026-10-28T14:03:44.011Z

- [ ] Test least-privilege roles and cross-tenant access with separate test accounts.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Auditability — Company-published

> - Logging and Monitoring: Audit logs retained for at least 12 months; continuous security monitoring.

Source: https://checkitapps.com/terms/data-privacy-agreement
Reviewed: 2026-10-28T14:03:44.011Z

- [ ] Verify administrative and data-access events, retention and export.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Data handling — Mixed claims — review

> This Data Processing Agreement (" DPA") is entered into between CheckIT Technologies Inc., a Delaware corporation, 144 Via Bandolero, Arroyo Grande, CA 93420 ("CheckIT," "Processor," or "Service Provider"), and the subscribing customer ("Customer," "Business," or "Controller") that has accepted the CheckIT Terms of Service or signed an Order referencing this DPA (the "Agreement").

Source: https://checkitapps.com/terms/data-privacy-agreement
Reviewed: 2026-10-28T14:03:44.011Z

> This DPA supplements and is incorporated by reference into the Agreement.

Source: https://checkitapps.com/terms/data-privacy-agreement
Reviewed: 2026-10-28T14:03:44.011Z

> Questions about our subprocessors or data practices?

Source: https://checkitapps.com/terms/subprocessors
Reviewed: 2026-10-28T14:03:44.011Z

- [ ] Review DPA, subprocessors, retention, deletion, residency and AI training use.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Reliability & support — Company-published

> - Incident Response: Documented plan with defined roles, escalation, and notification procedures, tested at least annually.

Source: https://checkitapps.com/terms/data-privacy-agreement
Reviewed: 2026-10-28T14:03:44.011Z

- [ ] Request SLA, incident history, recovery targets and support escalation terms.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Product effectiveness — Not found


- [ ] Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

## Decision

- Owner:
- Intended use and data sensitivity:
- Blocking requirements:
- Pilot success criteria:
- Unresolved risks:
- Decision and review date: