Strategic decisions involve sensitive data — financials, M&A targets, competitive intelligence. arbitrIQ is built with security as a foundational requirement, not an afterthought.
arbitrIQ is built with security as a foundational requirement, not an afterthought. User passwords are never stored in readable form — they are protected using bcrypt, the industry-standard algorithm that makes brute-force cracking computationally impractical even if a database were ever compromised. Session tokens are generated using a cryptographically secure random source and stored only as hashed values, meaning a stolen token file would be useless to an attacker.
To block automated attacks, the platform enforces account lockouts after five failed login attempts within fifteen minutes, and caps password-reset requests at three per hour. Every new account must verify its email address before gaining access, and an optional two-factor authentication layer is available for users who want an additional line of defence.
On the network side, all communications are enforced over HTTPS with a strict HSTS policy, and every page response carries security headers that prevent clickjacking, content injection, and MIME-type confusion. Database queries are handled exclusively through a parameterised ORM, eliminating the entire class of SQL-injection vulnerabilities.
Payment flows are secured end-to-end through Stripe's signature-verified webhooks, and all API credentials are stored as environment variables — never hard-coded into the application. Security-relevant events (failed logins, password resets, financial operations) are systematically logged, providing an audit trail for incident detection and response.
Two-factor authentication (2FA) is available for users who want an additional line of defence. It is implemented using time-based one-time passwords (TOTP) that are sent by email and verified against a server-side secret.
Board-level decisions require more than a recommendation — they require a defensible record of how that recommendation was reached.
"Can I show my board how this recommendation was reached?"
With arbitrIQ: yes. Every debate dimension includes full arguments from both sides, evaluator scoring, and a clear synthesis chain. The transcript is your audit trail.
arbitrIQ sits between problem identification and decision commitment. Use it after framing the question and before presenting to the board.
"How does this fit into our existing decision process?"
arbitrIQ integrates into your existing governance process. The output is designed for board presentations, client deliverables, and internal decision records.
"Is this worth the investment compared to what we already do?"
If your decisions involve millions in capital allocation, the question isn't whether structured contradiction is worth €199/month — it's whether you can afford not to have it.
Start with a single analysis. No commitment required.
Launch arbitrIQ See PricingAnalysis informs decisions. Governance protects them.