Your data is secure

Security & data protection overview

How we protect your data

Because the Services may process business documents, emails, purchase orders, quotes, and customer records, security and data protection matter. This is a high-level overview of our practices. It is not a guarantee of absolute security or a substitute for a signed security agreement.

Dedicated isolation

Mountain Goat is single-tenant: one customer per deployment. Your instance has its own database, its own document storage, and its own encryption key. Nothing is shared with, or reachable from, any other customer's environment. The application sits behind a firewalled load balancer that terminates HTTPS and is never exposed directly to the internet.

Encryption

Connections use TLS/HTTPS. Storage volumes are encrypted at rest, and integration credentials and tokens receive an additional layer of AES (Fernet) application-level encryption before they are stored. Secrets are excluded from source control, logs, exports, and diagnostics by design, and are never returned to a browser.

Access controls

Access within your instance is role-based (Full Admin, Manager, Editor, view-only) and enforced on the server. Day-to-day operators process orders without seeing credentials or integration secrets. Mountain Goat staff have no standing login to your instance: when support access is needed, a time-limited, one-time-code account is created, expires automatically, and is fully audited. You are responsible for managing your own user access, inbox permissions, ERP credentials, third-party integrations, and internal approval controls. SSO is supported; the Okta SSO setup guide walks your IT team through it.

Read-only by design

When you connect Gmail or Outlook, Mountain Goat requests read-only mail access through OAuth 2.0. It reads messages to find purchase orders and never sends or changes mail, and it never receives your email password. The Goat copilot is also read-only: it answers questions and does not take actions. ERP write-back runs only through integrations you enable, such as Oracle EBS or QuickBooks. Without one, ERP integration is validation and preview only.

Automation and human review

Mountain Goat may use automation, parsing logic, rules, and AI to prepare structured data for review and export. AI extraction is optional and off by default. Automated outputs should be reviewed before use in business-critical workflows, downstream systems, customer commitments, order acceptance, shipping, invoicing, or production decisions.

Data portability and deletion

Your data stays yours. A complete backup of your instance, the database and all stored documents, is available on request at any time in open, standard formats. Your administrators can also export records to CSV directly from the app. At offboarding, everything is returned to you and the instance, its storage, and its snapshots are deleted, confirmed to you in writing.

Incident response

If we become aware of a security incident involving Customer Data, we will take reasonable steps to investigate, mitigate, and notify affected customers as required by applicable law or contract.

Shared responsibility

Security is a shared responsibility. Mountain Goat is responsible for commercially reasonable safeguards for the Services. You are responsible for your own systems, users, credentials, data quality, approvals, downstream system controls, and internal review processes. We are glad to complete your vendor security questionnaire or walk your team through any item above. A Data Processing Addendum is available on request. Email hello@mountaingoat.ai.