- contact@verticalserve.com
- Continuous compliance, proven every hour
Built for VerticalServe’s own model: a workspace per client, consultants holding a role in each one they support, and a portfolio that shows every client’s readiness, failing controls and audits in one place.
The portfolio lists each workspace your email has an account in, with your roles there, readiness per framework, control health, open and critical issues, and audits in flight. Open one and the workspace switcher signs you in to it, with the same email and that workspace’s role.

| Role | May |
|---|---|
| admin | Everything, including users, integrations and settings |
| compliance | Run the program: frameworks, controls, policies, evidence, vendors, risks, audits, Trust Center |
| contributor | Work what is assigned: controls, issues, evidence and access-review items; read the rest |
| employee | The employee portal only |
| auditor | Only the audits they are invited to |
| viewer | Read |
Every row carries its organization and every query is scoped to the caller’s; underneath, Postgres row-level security enforces the same boundary, and the application connects as an ordinary database role so the policy binds. A guessed id from another client answers 404.
A client that needs its data in its own environment runs the self-hosted edition; consultants then get accounts there instead.

Each one is answered on a screen you can open, and most can be typed into Ask Assure as they are.
The same email, a role in each client.
Scoping in code and row-level security underneath.
Frameworks, policies, risks and answers in one step.