Security
Your project datalives in its own database.
A site journal holds everything that happens on a project: who worked, what was poured, which supplier delivered late, what went wrong. Handing that to an outside vendor is a real decision. Here is exactly how it is held.
A separate database per customer
Not a shared table with a customer column. Each customer gets their own database, provisioned on its own. That is what makes the next two promises possible to keep.
Export it or delete it, on request
Because the data sits in one place that belongs to you, we can hand you the whole thing, or destroy it, without unpicking it from anyone else's.
Roles, per project
People see the projects they are on and the sections their role allows. A foreman, an office admin and a company owner do not see the same screen.
Encrypted, and written down
Traffic is encrypted in transit and data at rest; connection secrets are encrypted separately with their own key. Actions inside the system are recorded in an audit trail you can read back.
Where it runs
The application runs on Cloudflare's network, with managed Postgres databases and a dedicated identity provider for sign-in. Admin access to the fleet sits behind a separate gate from the customer application.
Paperwork
A data processing agreement is ready to sign. If your IT team has a security questionnaire, send it over - we answer them ourselves rather than pointing at a badge.
Download the DPA (PDF)Something here that needs a straight answer?
Ask us directly. If we do not hold a certification, we will tell you so. Security questionnaires are welcome by email; anything quicker, WhatsApp is faster.