YOUR DATA
Security and data
Production and partner figures are commercially sensitive, and accounting records have to stand up to audit. Converge HCA, the hydrocarbon accounting software from Pave Technologies, runs on the same platform as Converge IOMT, with controls designed for a hard close.
ISOLATION
A separate database per company
Each company’s Converge HCA records are kept in a database for that company alone, the same separation Converge IOMT uses.
Another company’s records are never in the same tables as yours. Sign-in and licence records are held centrally by the Converge account service, apart from accounting data.
CONTROLS
Controls in the first release
What follows describes how Converge HCA is designed. We do not list certifications we do not hold.
Segregation of duties
Entering, approving, locking and reopening are separate permissions. The server refuses an approval from the person who prepared the entry.
Locks enforced twice
A locked period is read-only at the API, and a database trigger blocks any write dated inside it. Reopening needs a second approver and a reason.
A hash at every lock
Locking a period records a SHA-256 hash of its posted records, and every report generated from the period is checked against it.
Records never edited in place
Tickets, allocation runs and reports are superseded, never edited. The superseding record names its reason and its approver.
Immutable audit log
Every change records the value before and after, who made it, when, why and from what source.
Read-only auditor access
Auditors get a read-only role and the period’s audit pack: inputs, rule versions, runs, approvals and the audit log.
Retention
Records are kept for at least seven years by default, and longer where a regulator requires it.
One Converge account
Sign-in is the account service Converge IOMT uses. See the IOMT security page for how passwords, sessions and staff access are handled.
ON-PREMISES
Your own servers
Converge IOMT can be installed on your own servers so project data never leaves your network. If your accounting data must stay inside your network, tell us when you book a demo and we will confirm what a Converge HCA install needs.
OPEN DATA
Your data, always exportable
- REST API and MCP server access to every record and calculation
- CSV and spreadsheet import with a mapping preview
- An audit pack export for every period