Questions a buyer asks first.

Short answers, each one backed by the code as it runs today. The longer version of the security answers is the trust page.

Where is our data stored?

In Google Cloud Firestore, multi-region nam5, in the United States, with the app served by Vercel. There is no India region today. If your firm needs data kept in India, tell us before you start; we cannot offer it yet and will say so. We also keep backup copies of the database, made to test that restores work, on the operator's encrypted computer in India, and delete each one within 30 days. During early access, use demo data only: do not upload real employee data until we tell you the hosting plan is ready for it. Vercel's data-processing terms cover its Pro and Enterprise plans, not the plan we use during early access.

Who can see salaries and cost?

Owner, admin, finance and HR. Delivery and viewer logins see people, allocations, load and bill rates, and never a monthly cost, a salary band or a proposal price. The rule lives in the database, not only in the screen, and a test suite proves it on every push. One caveat: bill rates are visible to every role, so if you set bill rates as a fixed multiple of salary, a colleague who knows the multiple can work back to the cost.

Can another company on Crossruled see our data?

No. Each workspace is its own tenant and every read and write is checked against your membership in the database rules. One of the automated tests is a signed-in user of another company being refused your data, and it runs on every push to production. A separate AI-assisted security review and five re-verification passes ran on 29 and 30 September 2026.

What does early access cost?

Nothing. There is no card, no invoice and no payment anywhere in Crossruled. Pricing will be published before paid plans start, early-access tenants hear first, and you keep your data and choose whether to continue.

How long is the trial, and what happens when it ends?

Fourteen days from the day the workspace is created, enforced in the database rules, not just the screen. We extend it on request while you are using it. When it ends you can still sign in and the workspace shows an evaluation-ended screen. If nobody has asked us to keep or delete the workspace, we email the owner and delete it 90 days after the evaluation ended, with at least 14 days' notice. Ask us to keep it or delete it sooner at any time.

How do we get in?

Send the early-access form. We reply by email, usually within a few working days, with a one-use access code bound to the email you gave. Sign in with that email, enter the code, and your workspace is created and isolated from the first record.

Can we take our data out and leave?

Yes, any day. Settings has a one-click JSON export of people, roles, projects, allocations and proposals, with per-person cost included for cost roles, and the reports download as CSV. To close the workspace, export first and email us; we delete within 30 days of your request.

Does it handle INR and USD?

Yes. A workspace has a default currency, INR or USD, and every screen can switch the display currency. The exchange rate is set in Settings with its date and source, or taken from the European Central Bank reference rate, and every saved proposal records the rate and the day it used.

Can we import our master sheet from Excel?

Yes. Download the template, paste up to 500 people per import, and every bad row is named before a single record is saved. After that HR edits people in the workspace directly.

Does it run inside Microsoft Teams?

A Teams tab package exists and opens the same workspace as a tab. It is available on request and is not yet published to a Teams admin center, so your Teams admin uploads it as a custom app.

Can our security team review it before we upload employee data?

Yes. The trust page states what is true today: tenant isolation proven by tests, who sees what by role, and what the audit log records. Crossruled holds no SOC 2 report and no ISO 27001 certificate; both are roadmap items and we say so plainly. The security audit and re-verification records are available on request. During early access, use demo data only: do not upload real employee data until we tell you the hosting plan is ready for it.

What does the audit log record?

Who made the change (the signed-in email), the action, the collection and record, the time, and for most records the values before and after. Per-person cost values are never written into it. Entries are written by the app as each change saves, can be read by owner, admin, finance and HR, and cannot be edited or deleted by anyone in the workspace.

Is there an uptime commitment or a status page?

Not yet. Early access carries no uptime SLA and there is no third-party status monitor. A public health endpoint reports the build and configuration state, and incidents are handled by email with the workspace owner.

What support do we get?

Email support from the people who build the product. Severity 1 is a workspace outage, blocked sign-in or a suspected data exposure and is handled first; severity 2 covers import, export, pricing and Teams issues; severity 3 covers questions and onboarding help. We reply to requests by email, usually within a few working days.

Something not answered here? Write to codingrajan@gmail.com and we add it.