Book A Demo
green line

Trust Centre

Security, compliance and transparency behind RapidP2P

RapidP2P supports critical finance processes and the information that moves through them. Explore how Efficiency Leaders approaches cloud infrastructure, information security, access control, third-party risk, integrations and service support.

Request Security Documentation
Explore Security FAQs
RapidP2P hero3

Security, Privacy & Compliance

Our Approach to Security & Compliance

Security practices designed to support the standards our customers expect.

Protecting customer information requires more than technology alone. It depends on clear governance, controlled access, secure infrastructure, independent assurance and disciplined operational practices.

Efficiency Leaders applies defined security and compliance controls across the way RapidP2P is hosted, managed and supported. Our approach is designed to protect customer information, reduce security risk and provide finance, IT, security and procurement teams with the assurance they need when assessing RapidP2P.

certified icon
gcc iso cert
ISO/IEC 27001
Certified Information Security Management System
cloud infrastructure icon
Microsoft Azure
Enterprise cloud infrastructure
australia icon
Australian Hosting
Sydney & Melbourne Azure regions
security icon
Independent Security Testing
Third-party penetration testing
access icon
Access Controls
SSO & Role-Based Access Control

Explore our Trust Centre

Find the information you need

Explore the areas below to find information relevant to your security, technology or procurement review.
infrastructure icon
Infrastructure
Learn how RapidP2P is hosted, where its Azure infrastructure is located, how the platform is deployed and how the environment supports geographic data requirements and scalability.
View Infrastructure FAQs →
security icon 1
Security
Explore security governance, ISO/IEC 27001 certification, access safeguards, independent testing, logging, platform maintenance and information protection practices.
View Security FAQs →
third party icon icon

Third-Party Risk Management

Understand how Efficiency Leaders assesses and manages suppliers and service providers and how relevant security and privacy requirements are addressed.

View Third-Party FAQs →
access icon
Access
Learn how RapidP2P supports Single Sign-On, user administration and Role-Based Access Control.
View Access FAQs →
integration icon
Integration
Understand how RapidP2P connects with cloud and on-premises ERP environments, APIs and other third-party applications
View Integration FAQs →
support icon
Support & Maintenance

Review the support and escalation processes available to RapidP2P customers.

View Support FAQs →

Security & Compliance FAQs

Detailed answers for your due-diligence review

Find detailed answers about RapidP2P’s infrastructure, security practices, third-party risk management, access controls, integration and support.
0 questions
Infrastructure
Security
Third-Party Risk
Access
Integration
Support
infrastructure icon grey

Infrastructure

How RapidP2P is hosted and delivered
RapidP2P is hosted on Azure cloud infrastructure.
RapidP2P is hosted on the Azure Availability Zones of Australia East (Sydney) and Australia Southeast (Melbourne).
RapidP2P is deployed under an Enterprise SaaS model; it is deployed on Microsoft Azure and configured to customer needs. The ability to integrate with and export from RapidP2P gives our customers reassurance against vendor lock-in.

RapidP2P is fully hosted on the Microsoft Azure platform. Data at-rest and in-transit is fully contained within Microsoft’s Australian data centres. At the customer’s request, Efficiency Leaders can implement geo-blocking.

The Azure cloud infrastructure has automated capacity monitoring and alerts to notify RapidP2P’s system administrators when the capacity threshold markers have been triggered. RapidP2P can scale-up or scale-out where necessary.
RapidP2P is deployed on Microsoft Azure’s serverless architecture, where Microsoft actively secures and hardens the underlying operating system. In addition, Efficiency Leaders’ security team uses Microsoft Defender for Cloud to continuously monitor and improve the platform’s security posture.
security icon grey

Security

Information security governance and controls
Yes. In addition to ongoing automated vulnerability scanning, Efficiency Leaders commissions formal third-party web application penetration tests. A summary penetration test report for RapidP2P is available upon request.

RapidP2P is deployed on serverless architecture on the Microsoft Azure cloud platform. All patching and security are handled automatically by Microsoft. In the event of a RapidP2P patch, Efficiency Leaders’ support team manages and schedules this in consultation with the client.

RapidP2P is deployed on serverless architecture on the Microsoft Azure cloud platform. Security is handled on this platform automatically by Microsoft. Efficiency Leaders has up-to-date virus protection on all staff and system machines used in software development and day-to-day operations.

Yes. Efficiency Leaders holds ISO/IEC 27001:2022 certification for its Information Security Management System (ISMS). The certificate is available upon request.
RapidP2P is deployed on serverless Azure infrastructure. Each resource has native Azure logging and diagnostics enabled. RapidP2P also has its own in-built logging and data capture to enable offline diagnostics and scenario recreation.
Access to Azure (where the log files reside) is managed on a principle of least privilege. MFA is enforced for all Efficiency Leaders staff that requires access. Encryption at rest and encryption in transit policies are standard for every deployment.
Yes, Efficiency Leaders is very proactive and open with customers. If weaknesses are identified, we work with the customer to a satisfactory conclusion. Our incident response policy includes notifying the customer and any other third party where legally obliged to do so.
Efficiency Leaders has documented information handling, access control, and incident management processes designed to reduce the risk of unauthorised disclosure or loss of information.
Yes. Efficiency Leaders has a documented information security governance framework with defined roles, responsibilities, and management oversight for the Information Security Management System (ISMS).
third party icon grey

Third-Party Risk Management

Extending security expectations to the organisations we work with

Yes. Efficiency Leaders maintains a documented Third-Party Management Policy governing the selection, onboarding, assessment, and ongoing management of suppliers and service providers. Third parties are assessed based on the nature of the services they provide and the associated business, security, privacy, and operational risks. Security and confidentiality obligations are incorporated into supplier agreements where appropriate, and suppliers are reviewed periodically throughout the relationship.

Efficiency Leaders incorporates appropriate security, confidentiality, privacy, and data protection requirements into supplier agreements based on the services provided and the associated risk profile. Supplier relationships are periodically reviewed to ensure they continue to meet Efficiency Leaders’ security and compliance expectations.

access icon grey

Access

Controlling who can access RapidP2P and what they can do
RapidP2P utilises SAML SSO integration through Microsoft Entra ID.
User registration and de-registration is controlled by a customer admin user, directly on the RapidP2P application.
RapidP2P supports various levels of user access as an out-of-the-box feature. Users, roles, groups, entities, and sites can be configured with different tasks applied to them, such as administrative, coding, matching, exception handling, and more. Views of the document library, task list, and administrative areas can be either visible or hidden according to the user’s access rights within the organisation.
integration icon grey

Integration

Connecting RapidP2P with your existing finance environment
Integration with the customer’s ERP or finance system is needed and therefore interoperability is required between RapidP2P’s Azure cloud platform and the customer’s ERP-hosted infrastructure. Efficiency Leaders has implemented RapidP2P in all variations of infrastructure interoperability; whether it is cloud-to-cloud or cloud-to-on-premise, we can provide the solution that works.
RapidP2P provides a comprehensive set of APIs and integration capabilities to support connectivity with ERP systems and other third-party applications.
RapidP2P has a suite of APIs and out-of-the-box integration capability, utilising web services and flat-files with SFTP.
support icon grey

Support & Maintenance

Defined support when you need it
RapidP2P’s hosted service level uptime target is 99.5%.
Efficiency Leaders maintains a documented Support Services Commitment, including support processes and escalation procedures. Customers have access to Efficiency Leaders’ support portal to log, track, and manage support requests.

Security documentation

Need more detail for your security review?

We understand that security, IT and procurement reviews can require evidence beyond the information appropriate to publish publicly.
Efficiency Leaders can provide additional supporting information as part of the due-diligence process, including our ISO/IEC 27001 certificate, RapidP2P penetration test report, and further information about our defined security controls, service commitments and operational security processes.
Request Security Documentation
Contact Us