Trust
Security
Bison Sawmill is built around access control, tenant separation, and careful handling of commercial information. A mill’s pricing, margins, customer relationships and order history are competitive information, and the system is designed around that.
Hosting and infrastructure
Bison Sawmill runs on managed cloud infrastructure. Each mill’s data is held separately.
Encrypted access
All access runs over HTTPS with certificates from a public certificate authority. Plain HTTP requests are redirected. Strict transport security is enforced, so a browser that has visited once will not attempt an unencrypted connection again.
Authenticated accounts
Access requires an account. Each person signs in with their own credentials and works within an authenticated session. Passwords are stored only as cryptographic hashes and never in readable form. Session cookies are HTTP-only and secure, and credentials stay server-side.
Roles and permissions
Four roles, with genuinely different views of the same records. Sales sees the pipeline, quotes and customers. Purchasing sees orders, tickets and material. Production sees tickets and their stages. Administration sees everything, including cost and margin.
Permissions are enforced by the server on every request, not by hiding controls in the interface.
Cost and margin visibility
A sales user cannot retrieve cost or margin figures from Bison Sawmill. This is enforced at the API, not by omitting the numbers from a screen.
Discount authority is a policy threshold set by role. Requests to exceed it are logged with the person who made them.
Tenant isolation
Each mill’s data is held separately from every other mill’s. One mill’s information is never reachable from another mill’s workspace, and the separation is enforced by the system on every request.
Documents and drawings
Takeoffs, drawings and order attachments are held in per-mill storage and reached through the same access controls that govern the order they belong to.
Financial records
Records that become invoices are not edited in place. Corrections are made by reversal, and the original entry remains. Changes to an order — its stage, value, owner or parties — are recorded with the person who made them and the time they did.
The accounting boundary
Bison Sawmill does not keep your ledger, and holds no credentials that would let it. It produces invoices and sends them to your accounting system. It does not read your books, alter them, or reconcile them. Nothing about your general ledger is reachable from Bison Sawmill.
Payment information
Bison Sawmill does not store card numbers or bank account details for your customers. It records what was invoiced and what was paid, and nothing that could be used to take a payment.
Administrative access
Server and database access is restricted. Administrative credentials are held server-side and are never exposed to the browser.
Data export
A mill can retrieve its own information at any time. Your data remains yours and you can take it with you.
Questions about data handling are welcome before anyone commits to anything.
Have a question about your data?
We would rather have that conversation early than after your orders are in the system.