CSA STAR Registry

Ploxir is a multi-tenant SaaS dashboard that brings a business's revenue and performance data together, and rolls several businesses up into one portfolio view.

It connects to the platforms a business already uses — across payments, storefronts, analytics, advertising, app stores, subscription billing, marketing, support and monitoring, among others. The catalogue grows continuously; the current list is at ploxir.com/integrations.

Access is read-only wherever a platform offers read-only scopes, and a customer can revoke it at the provider at any time. For connected platforms the provider stays authoritative and Ploxir holds a derived copy. Data a customer enters or sends to Ploxir directly is held only by Ploxir, under the same export, retention and deletion controls.

Security posture (control-by-control detail in the accompanying CAIQ self-assessment):

• Connected-platform credentials encrypted at rest with AES-256-GCM; versioned keys held outside the database
• TLS 1.2 or higher in transit
• Least-privilege role-based access control enforced server-side on every mutation; tenant isolation re-verified per request
• Multi-factor authentication with single-use backup codes
• Audit logging of security-sensitive actions
• Nightly integrity-verified backups, replicated offsite; restore rehearsed
• Published vulnerability disclosure policy at /.well-known/security.txt (RFC 9116)
• Self-service data export and deletion