ClaimStack

Commercial operating system for construction connecting procurement, variations, claims, and forecasting.

claimstack.com.au

Enterprise evidence

Procurement review needed

Public information covers security assurance, access controls, auditability. Still unresolved: sso & provisioning, product effectiveness.

8 official sources · Fresh page review · Not independently tested

Sources reviewed 2026-11-06

5 / 7 areas with published evidence · 0 independently verified

Evidence & checks
Security assuranceCompany-published
SOC 2 Type IIReviewed 2026-11-06View source
- They're ahead on a few things and we won't pretend otherwise: SOC 2 Type 2, Jobpac and Cheops integrations, a guided 90-day implementation, and a much longer track record on very big jobs.Reviewed 2026-11-06View source

Before relying on it
Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.

SSO & provisioningNot found

Before relying on it
Test SSO enforcement, user removal and privileged-account recovery.

Access controlsCompany-published
- Role-based access controls (RBAC)Reviewed 2026-11-06View source

Before relying on it
Test least-privilege roles and cross-tenant access with separate test accounts.

AuditabilityCompany-published
Immutable audit trails, document retention, and multi-party data isolationReviewed 2026-11-06View source

Before relying on it
Verify administrative and data-access events, retention and export.

Data handlingCompany-published
Australian Data ResidencyReviewed 2026-11-06View source
Each is bound by data processing agreements and subject to ongoing security review.Reviewed 2026-11-06View source

Before relying on it
Review DPA, subprocessors, retention, deletion, residency and AI training use.

Reliability & supportCompany-published
Monitoring & Incident ResponseReviewed 2026-11-06View source
- Automated backup and disaster recoveryReviewed 2026-11-06View source

Before relying on it
Request SLA, incident history, recovery targets and support escalation terms.

Product effectivenessNot found

Before relying on it
Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.

Published claims are not verified controls. No hands-on performance or security testing has been performed.

What we know

Founded 2025; 2 employees; uses AI for invoice extraction and validation.

Worth asking

Broad commercial OS focus; enterprise readiness unverified.

Sources

Evidence details

Enterprise controls

SOC 2 Type II SOC 2 Type II - They're ahead on a few things and we won't pretend otherwise: SOC 2 Type 2, Jobpac and Cheops integrations, a guided 90-day implementation, and a much longer track record on very big jobs

Developer access

→ REST API & webhooks (on request)

Last checked Nov 6, 2026

Company-published evidence, not an independent audit. Unknown means unverified.