Sign inBook a demo

Security and your data.

The answers procurement asks for, plainly and only what is true today.

Book a demoAsk for our DPA

Meadow View care home, illustrative · BLD-MDV05

Apart
Each company's records kept apart, checked by the database on every request
1 h
Files private; download links expire after an hour
HMAC
Webhooks signed with SHA-256, a secret per webhook
0
Card numbers SAMRISK sees; our payment provider takes them

Where your data lives.

Three places hold your records. We will publish the hosting regions here once they are confirmed, not before.

WhatProvider
Records, sign in, live updatesA managed database, encrypted
Files: documents, photos, certificatesPrivate file storage, encrypted
The web appManaged cloud hosting

Each company walled off.

Every table carries its company. The database itself checks that you belong to that company on every read and every write, so a mistake in the app cannot show you someone else's records.

Halden Estates

BLD-RVT01 Riverside TowerBLD-ALB02 Albion CourtSTE-NGP01 Northgate Park
using (
user_belongs_to_
company(company_id)
)

Another company

hidden from youhidden from youhidden from you

Access and roles.

Three roles per company. Signing up confirms your email with a one-time code. Leaving a company ends access at once.

AdminEverything a manager can, plus people, billing and company settings.
ManagerCreate and change buildings, sites, audits and records; approve; see every building and site.
UserWork on the records they are given; report, inspect, upload. Can be limited to chosen buildings and sites (proposed).

Audit log.

Proposed. Today an activity feed records key changes. The full log will keep every change: who, when, what, and the record.

22 Oct 2026 14:08Priya Shahchanged result Fail → Pass, reason givenFD-07-14
22 Oct 2026 13:51Tom Ellisuploaded version 2DOC-2291
22 Oct 2026 09:30Dan Okaforapproved report v4BLD-RVT01
21 Oct 2026 16:12Halden Estates admininvited a contractor, user roleHalden Fire Ltd

How the full log will read. Illustrative.

Backups.

We will publish how long backups are kept once it is confirmed.

DatabaseBacked up by our database provider.
FilesHeld in private file storage, every document version kept.
Your copyExport buildings, tasks, audits, documents, incidents, assets, visitors and material call-offs as CSV or XLSX at any time.

Sub-processors.

Ask for our DPA
WhoWhat forWhat they see
Database providerRecords, sign in, live updatesAll your records
Cloud hostingRunning the app; file storageYour files and app traffic
Payment providerSubscriptions and invoicesBilling contact and card (we never see the card)
Email providerCodes, invitations, notificationsNames, email addresses, the message
AI provider, optionalDrafting safety case sectionsThe building's name, address and key facts and the section to draft, only when you ask for a draft

Also contacted, with no account data: a map imagery service (the map area only) and an address lookup service (the address typed). Our data processing agreement names every provider.

Found a flaw? Tell us.

How
Email [email protected] with the steps to reproduce.
We ask
Test only your own company, take no data, and give us time to fix it before you publish.
We promise
A reply within five working days, updates until it is fixed, and credit if you want it.

Security summary

Two pages · coming soon

  1. Where data lives
  2. Company walls
  3. Access and roles
  4. Backups and exports
  5. Sub-processors
  6. Reporting a flaw

The security summary is coming. Until it is ready, ask us and we will answer in writing.

Talk to us

Questions from procurement? Ask us.

Book a demoTalk to us