Where the data lives
Ceyu is local-first: boards are written to the user machine and work offline. Cloud sync is opt-in per workspace rather than the default, which changes the data protection question considerably.
For enterprise, IT and procurement
Everything you need to say yes or no.
An evaluation stalls when the answers are spread across a sales call, a PDF and a support thread. This page points straight at the documents, so your security and legal review can start today rather than after the first meeting.
The evaluation checklist
Each item links to the document that answers it. None of them require a call first.
Identity and provisioning
The Enterprise plan covers SSO and SCIM user provisioning, so accounts follow your directory instead of being managed by hand.
Roles and permissions
Team roles and granular permissions are part of the paid plans, with a shared permission model rather than per-surface exceptions.
Processing and subprocessors
The privacy documents state what is processed, on what legal basis, and the subprocessor list names every third party in the chain.
Deletion that actually deletes
Account deletion cascades through the stored data rather than flagging a row as inactive. The data request page describes how to exercise it.
What is not certified
We do not currently hold SOC 2 or ISO 27001. The security page lists the controls that are in place today, so you can judge the gap yourself.
Procurement documents
Terms, the data processing agreement, the subprocessor list, the acceptable use policy, refund and withdrawal rights and the accessibility statement are all published rather than sent on request. Enterprise agreements are annual with an SLA, and the commercial terms are handled directly.
Talk to us with the documents already read
The fastest evaluation is one where the security and legal pages have answered the standard questions before the first call, so the call is about the parts that are specific to you.