Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.




Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.

CSAI FoundationChaptersEventsBlog
New Training Courses: Turn CSA research into practical skills with self-paced Frontier Ready Training.

CSA STAR Registry

Security, Trust, Assurance, and Risk Registry

Listings for PortaPro Software

Listings for PortaPro Software

PortaPro Software is a cloud operations platform for portable sanitation, septic, roll-off and event rental companies. Operators use it to run customers and service sites, scheduling, dispatch and routing, a driver mobile app, invoicing and payments, fleet maintenance, inventory, and customer portals.

Security at a glance

  • Tenant isolation enforced in the database: row-level security on every table, plus a restrictive per-company guard on each company-scoped table
  • Identity by Clerk, with multi-factor authentication, passkeys and SSO; signed tokens on every database request
  • Encryption: TLS 1.2+ in transit, AES-256 at rest, and AES-256-GCM sealing for connected-service credentials
  • Payments by Stripe (PCI DSS Level 1); card data never touches PortaPro systems
  • Hosted on Supabase (AWS us-east-1) and Vercel, with daily encrypted backups
  • Automated security checks on every code change before release

Report a vulnerability: security@portaprosoftware.com

PortaPro

PortaPro is a multi-tenant software-as-a-service platform for portable sanitation, septic, roll-off and event rental operators, delivered as a web applica...

Listed Since: 2026-10-06

CAIQ
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).