Connecting Your PSA
Authorize ProLens to read your PSA data, what is connected, what is not, and how to do it.
Connecting your PSA is the first thing you do in ProLens. Once authorized, your dashboard starts populating within minutes.
What connecting means
When you connect a PSA, ProLens reads:
- Projects - names, clients, statuses, budgets
- Time entries - hours by person, by project, by day
- Invoices - issued, due, paid amounts and dates
- Deals - pipeline value and stage
That is it. ProLens never writes, edits, or deletes anything in your PSA. The connection is one-way and read-only.
How to connect
- Go to Settings > Connections.
- Click Connect on your PSA (currently Productive.io).
- Sign in with your PSA credentials in the popup window.
- You are back in ProLens. The first sync starts immediately.
Data typically appears on your dashboard within five minutes of connecting.
Supported platforms
- Productive.io - fully supported today
- BQE Core - coming soon
- Deltek Vantagepoint - coming soon
- Deltek Ajera - coming soon
- Harvest - coming soon
- Unanet AE - coming soon
In Settings > Connections, click any "coming soon" platform to join the waitlist. We will email you the moment it is available.
How credentials are stored
PSA credentials are encrypted with AES-256-GCM using per-row data encryption keys wrapped by a master key (the same envelope-encryption pattern banks use for payment card numbers). The raw token is never echoed back through the UI and is decrypted only when ProLens needs to make a request to your PSA.
You can rotate the token or revoke access entirely at any time from Settings > Connections.
Where your data lives
Financial records (invoices, time entries, cost rates) are encrypted at the field level with your tenant's unique key before they reach ProLens's database. Data syncs every 15 minutes. When you disconnect, all your data and encryption keys are permanently deleted.
See Security for the full read-only and encryption architecture.