Procore OAuth
Procore is connected through its own authorization flow. The records Denize can read or write are limited to what that authorization allows.
Construction AP security and data handling People keep control of financial decisions.
Construction financial documents contain sensitive company and project information. Denize is designed to limit access, preserve review and use customer data only to operate the service.
Annual ACV pricing · Unlimited invoices and users · Onboarding included · Signs in with Procore
Reviewed
- Sign-in
- Procore OAuth. Denize never receives the password.
- Records
- Created in Procore only after a person reviews.
- Attachments
- Encrypted private storage while pending.
- Payments
- Denize does not make payments.
How Denize approaches invoice security
Denize uses encrypted connections, secure sessions, access controls, and encrypted private storage for pending invoice attachments. Procore is connected through Procore’s own OAuth authorization, so Denize never receives a Procore password.
Limits
What Denize can and can’t do
Denize does
- Connects through Procore’s own OAuth, so Denize never receives your Procore password.
- Waits for a person: nothing is submitted to Procore until someone has reviewed it. The invoice is then created in the status that person chose, Approved by default.
- Runs Invoice Check read-only by default. A Procore record changes only when an accountant returns the invoice to the vendor or pushes a correction (current-period billed amounts on commitment invoices only). Set up as a step in your Procore invoice workflow, it can also pass clear invoices on and send the rest to accounting review with its findings in the workflow comment.
Denize does not
- Make payments or reimburse employees.
- Create Procore purchase orders or subcontracts.
- Change your Procore invoice workflow. To have it take over, submit with a status such as Under Review or Pending.
- Sell personal information.
Core controls
Security follows the invoice from access through submission
Protected invoice access
Pending invoice attachments are kept in encrypted private storage and served through authenticated application controls.
Human-controlled submission
Suggested fields and commitment allocations remain editable. Procore records are created when an authorized reviewer submits them.
Invoice Check reads, people decide
Invoice Check connects through its own Procore app and reads the records and attachments that authorization allows. By default it only reports; a Procore record changes when an accountant returns the invoice or pushes a correction, or when your Procore workflow uses it as a verification step.
Company and project access
Team members sign in with their own Procore accounts. Both current Procore access and Denize company membership govern access.
Audit trail
Denize records who reviewed each invoice, what changed, who submitted it and when, and keeps the original document with the record.
AI processing
What happens when AI helps prepare an invoice
AI providers process invoice content for extraction or matching requests under their API terms and configured data controls. Denize does not intentionally use uploaded invoice content to train AI models.
Data lifecycle
Retention and customer choices
- Invoice documents and extracted data are processed to provide the service.
- Temporary Procore intake attachments are removed after submission or dismissal, subject to operational backups.
- Account, invoice-history, security, and billing records are retained as reasonably needed for the service, audit, security, disputes, and legal obligations.
- Denize does not sell personal information.
- Customers may request access, correction, or deletion where applicable.
- No internet service can promise perfect security; see the Terms of Service.
Review the controls before you connect Procore.
Book a demo to walk through sign-in, access and review with your AP and IT leads before anything is connected.