FundMesa

Grant budget tracking

fundmesa.com

Enterprise evidence

Procurement review needed

Public information covers sso & provisioning, access controls, data handling. Still unresolved: security assurance, auditability, product effectiveness.

6 official sources · Fresh page review · Not independently tested

Sources reviewed 2026-11-03

4 / 7 areas with published evidence · 0 independently verified

Evidence & checks
Security assuranceMixed claims — review
We don't currently hold SOC 2, HIPAA, or other formal certifications, and we won't claim controls we haven't earned.Reviewed 2026-11-03View source
SOC 2 Type II: on our roadmap.Reviewed 2026-11-03View source

Before relying on it
Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.

SSO & provisioningCompany-published
- Single sign-on (on request — contact us)Reviewed 2026-11-03View source
| Single sign-on (SSO) | On request | On request | On request | On request |Reviewed 2026-11-03View source

Before relying on it
Test SSO enforcement, user removal and privileged-account recovery.

Access controlsCompany-published
As of September 2026 FundMesa has been through repeated internal adversarial security reviews — passes that go looking for ways to break the product rather than checking a list, including one run against the live application with tenant isolation fully enforced.Reviewed 2026-11-03View source

Before relying on it
Test least-privilege roles and cross-tenant access with separate test accounts.

AuditabilityNot found

Before relying on it
Verify administrative and data-access events, retention and export.

Data handlingCompany-published
| Data processing agreement (DPA), on request | Included | Included | Included | Included |Reviewed 2026-11-03View source

Before relying on it
Review DPA, subprocessors, retention, deletion, residency and AI training use.

Reliability & supportCompany-published
- Custom uptime SLAReviewed 2026-11-03View source

Before relying on it
Request SLA, incident history, recovery targets and support escalation terms.

Product effectivenessNot found

Before relying on it
Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.

Published claims are not verified controls. No hands-on performance or security testing has been performed.

What we know

Focuses on post-award tracking, budget-vs-actual reporting, and deadline management for existing grants; pricing starts at $129/mo billed annually.

Worth asking

Can it effectively bridge the gap between simple grant tracking and the rigorous budget-vs-actual reporting required for federal awards?

Sources

Evidence details

Enterprise controls

SOC 2 Type II: on our roadmap We don't currently hold SOC 2, HIPAA, or other formal certifications, and we won't claim controls we haven't earned

Developer access

API availability has not been verified.

Last checked Nov 3, 2026

Company-published evidence, not an independent audit. Unknown means unverified.