Skip to content
Xcel Software
Authorized Sage 100 Contractor Development Partner
Trust Center

Your reporting is built on your server, not ours.

DataXcel turns Sage 100 Contractor into dashboards, alerts and reports your whole team can use. Here is exactly how your data moves, what we touch, and how your IT team stays in control.

Built on your SQL ServerThe reporting database lives next to Sage, on your hardware. No copy of your Sage database sits in our cloud.
Sage is only readThe pipeline never writes to your company database. It writes only to the reporting database it creates.
Private, encrypted networkA WireGuard-based private network between your server and your DataXcel site.
One switch turns us offDisable one SQL login or remove one network device, and access ends immediately.
Sheet S-1 · Data flow

How your data moves

Every night at 2:30 AM, and whenever someone presses the sync button, the pipeline reads Sage and rebuilds your reporting database. A manual sync takes about ten minutes.

Your network Sage 100 Contractor Your company database Left exactly as it is READ NIGHTLY 2:30 AM + sync button Reporting database dataxcel_analytics Same SQL Server, with history snapshots No Sage seat or remote desktop needed to read a report ENCRYPTED TUNNEL WireGuard private network DataXcel on AWS Your DataXcel site Its own instance, never shared with another company yourcompany.xcel.report Nightly pipeline Runs the build on your server; holds no Sage data Credentials encrypted in AWS Systems Manager HTTPS Your team Browser and phone Signed-in users Inbox Scheduled reports and alerts SHEETS-1 REVNOV 26 DRAWN BYDataXcel SCALENTS Your network Sage 100 Contractor Company database, left as is READ NIGHTLY Reporting database dataxcel_analytics Same server, with history ENCRYPTED TUNNEL WireGuard private network DataXcel on AWS Your DataXcel site yourcompany.xcel.report Its own instance, never shared. Pipeline holds no Sage data; credentials encrypted in AWS. HTTPS Your team Browser and phone Inbox Reports, alerts
Stays on your server DataXcel services Drawn not to scale
Plain answers

What we read, what we write

Read only in use Your Sage company database

Read by the nightly pipeline to build your reports. Sage files, settings and tables are left exactly as they are.

We write here Reporting database on your server

Created once at setup, then rebuilt each night: report-ready tables plus history, so you can see what changed over time.

Layouts and users Your DataXcel site

Holds your dashboards, report layouts, user accounts and permissions, and shows results to the people you've signed up.

Controls

How access is protected

Network

  • Connection runs over NetBird, a private network built on WireGuard encryption.
  • Access rules limit us to the specific services we use, such as your SQL Server port.
  • Report queries are encrypted again inside the tunnel.
  • Everything in transit is encrypted: WireGuard to your server, TLS 1.2 or higher to your browser.

Credentials

  • Your SQL password is stored encrypted in AWS Systems Manager, never in code or configuration files.
  • The pipeline fetches it only at the moment it runs.
  • Change the password whenever you like, and we update ours to match.
  • Your DataXcel site's own database is encrypted at rest (AES-256).

People

  • Each customer gets a separate DataXcel site, never a shared one.
  • Each person sees only the reports meant for them. Payroll and job profit can be limited to the right people.
  • Sample users left from setup are removed before your team is invited.
  • Our staff sign in with two-step verification (MFA), each with their own account. No shared admin passwords.
  • Network connections and site logins are logged. We can send you an access report on request.

Your server

  • Your IT team creates the SQL login, on your server, under your control.
  • A standard Windows support user, not an administrator, limited to Remote Desktop and reachable only over the private network.
  • Nothing about your Sage installation is changed.
AI

AI that starts switched off

AI key: not connected

Your site starts with no AI key and no AI connection point open.

AI features such as the weekly CEO briefing and the Claude connector are set up deliberately, and you can turn any of them off.

Claude, by Anthropic

DataXcel's AI features use Claude through Anthropic's commercial service. Anthropic does not train its models on data sent through that service.

Accuracy

Numbers you can defend

A secure report that's wrong is still a risk. Before anyone on your team signs in, we check the numbers against Sage.

Before launchTied to Sage

Balance sheet, income statement and job reports such as over/under billing are compared with Sage's own reports before users are invited.

Every dayDashboards checked

The dashboards on your hub are run and checked daily, so a broken report is caught before you open it.

AlwaysHistory you can audit

Snapshots of jobs, receivables, payables and change orders show what changed and when.

Transparency

Services we rely on

We do not share customer data with anyone not on this list.

Amazon Web ServicesHosting in US West (Oregon), credential storage and encryption keys. Your data stays in the United States.
NetBirdThe WireGuard-based private network to your server
MetabaseThe open-source reporting software behind your site
AnthropicClaude, for AI features you turn on
Google FirebaseThe dashboard hub that links your favorite reports, and this website
GitHub ActionsBuilds and deploys our software. Never receives customer data.
OpenAISome AI features. Only the summary figures a report needs are sent, and the provider does not train on them.
Compliance

Where we are, and where we're going

No made-up certifications. Here is what we do today and what's next.

RoadmapSOC 2 Type I

Targeted for Q3 2027. We can share our control list and auditor on request.

Every yearOutside penetration test

Run by an outside firm. The latest summary is available under NDA.

Always openReport a security issue

Email security@xcel.software. We reply within 2 business days.

On requestData processing addendum

For customers with GDPR or state privacy duties. We never sell your data or use it to train AI.

Within 72 hoursBreach notice

If an incident affects your data, your main contact hears from us within 72 hours, then gets a written report.

If you leaveYour data stays yours

Your reporting database already lives on your server, and your Sage data never left it.

For your IT team

Questions IT asks us

What do we install?

The NetBird client, on your Sage SQL Server or a machine that can reach it. Nothing is installed into Sage itself.

How does the connection work?

NetBird joins your Sage server to a private WireGuard network with your DataXcel site. Access rules limit us to the services we use, such as your SQL Server port.

More detail: How DataXcel connects to your Sage server.

What permissions does the SQL login need, and why?

Sage 100 Contractor's database only lets administrator-level SQL logins read its tables, so your IT creates the login at that level. DataXcel uses it for two things: reading your company database, and building the reporting database. It never writes to your Sage company database.

The login stays on your server and under your control. Disable it or change its password whenever you like.

Does DataXcel change our Sage database?

No. We add one separate database, dataxcel_analytics, on the same SQL Server. Your Sage company database, its settings and its structure are left as they are.

How current is the data?

Your reporting database rebuilds every night at 2:30 AM. Anyone with access can press the sync button for a fresh copy in about ten minutes.

How do we cut off access?

Disable the dataxcel SQL login, or remove our device from your NetBird network. Either one ends our access immediately. Your reporting database stays on your server for you to keep or delete.

Where is DataXcel hosted?

On Amazon Web Services in the US West (Oregon) region. Each customer runs on a separate DataXcel site.

Are you SOC 2 certified?

Not today. SOC 2 Type I is targeted for Q3 2027. We'll complete your security questionnaire and walk your IT team through every control on this page.

Want a walkthrough for your IT team?

Our engineers will go through this page with your IT team, answer your security questionnaire, and show you every setting on a live site. Or email Info@Xcel.Software with your questionnaire.

Contact us
DataXcel by Xcel SoftwareTrust Center · Revised November 2026