Security Portal
Overview
Tesorio has implemented best-in-class security practices to keep customer data safe
More than just collections management and accounts receivable automation, Tesorio is the world’s first and only cash flow performance platform. Tesorio empowers CFOs and finance teams to boost profits by using artificial intelligence to better manage, predict, and collect cash.
Compliance
Tesorio is reviewed and trusted by
Documents
Risk Profile
Product Security
Reports
Self-Assessments
Data Security
App Security
Legal
Access Control
Infrastructure
Endpoint Security
Network Security
Corporate Security
Policies
Trust Center Updates
We have just uploaded our SOC 1 Type 2 and SOC 2 Type 2 reports covering the period from March 1, 2022 - February 28, 2023
Tesorio has added OpenAI, L.P. to its list of subprocessors. Purpose: ML/AI Data Processing. Location: USA.
Tesorio has now moved to manage subprocessor listings to our security portal. You can view our list of subprocessors here. All updates will now be recorded here on our security portal. Before this change, the last time subprocessors were updated were on February 12, 2022. If you would like to receive email notifications around subprocessor updates, please click the "Subscribe" button and submit your email.
Tesorio has become aware of the recently announced OpenSSL vulnerabilities CVE-2022-3786 and CVE-2022-3602. After a review, we have concluded that there is no impact to Tesorio or its customers at this time. Our cloud infrastructure partner provided a patch to our systems on November 1, 2022.
Tesorio will continue to monitor the situation closely and will provide updates where we have them available to us.
Sincerely, Fabio Fleitas Chief Technology Officer
Last Friday, Tesorio became aware of an incident that occurred with Heroku & GitHub. Tesorio conducted an internal investigation with the recommendations from Heroku & GitHub and have determined that we were not impacted by this issue.
Tesorio will continue to monitor the situation closely and will provide updates where we have them available to us.
Tesorio values the security of its services extremely highly and to this end we maintain appropriate industry accepted third party accreditation of our security controls and program.
Sincerely,
Fabio Fleitas
Chief Technology Officer
Tesorio became aware of a recently disclosed CVE-2022-22965 - "SpringShell" RCE vulnerability in spring-beans before 5.2.20/5.3.18, Tesorio can confirm we have conducted an internal investigation and can confirm that we have no evidence that Tesorio customers or internal employees have been targeted or impacted by this vulnerability.
Tesorio will continue to monitor the situation closely and will provide updates where we have them available to us.
Tesorio values the security of its services extremely highly and to this end we maintain appropriate industry accepted third party accreditation of our security controls and program.
Sincerely, Fabio Fleitas Chief Technology Officer
Tesorio has been aware of Okta's breach. At this time, Tesorio does not leverage Okta for its internal SSO authentication and therefore Tesorio has not been impacted by this. We will continue to monitor the situation. For any customers that leverage Okta for their own SSO authentication, please review Okta's messages for more information on any actions they recommend.
Sincerely, Fabio Fleitas Chief Technology Officer
If you think you may have discovered a vulnerability, please send us a note.