Enterprise-grade security for your operational record.

The operational record behind your buildings — assets, maintenance history, spatial data, vendor contracts — is critical infrastructure. We protect it with the same rigor we'd want for the buildings we operate ourselves.

Security at Every Layer

Multi-layered security that protects your data from the application level to the infrastructure.

Data Protection

AES-256 encryption at rest
TLS 1.2+ encryption in transit
Automated daily backups with 30-day retention
Data isolation between customer accounts
Secure data deletion on account termination

Access Control

Role-based access control (RBAC)
Multi-factor authentication (MFA)
SSO integration (coming soon)
Session management and timeout policies
Complete audit trail of user actions

Infrastructure

Cloud hosting with Azure
99.9% uptime SLA commitment
DDoS protection and WAF
Geographic redundancy
24/7 infrastructure monitoring

Compliance & Certifications

We're committed to meeting the highest standards for data security and privacy.

GDPR Ready

Full compliance with EU General Data Protection Regulation requirements including data portability, right to erasure, and consent management.

SOC 2 Type II

SOC 2 Type II certification in progress, validating our controls for security, availability, and confidentiality of customer data.

Data Residency

Choose where your data is stored. We offer data residency options in North America and Europe to meet regional compliance requirements.

Our Security Practices

Security isn't a marketing surface — it's how the platform is built, deployed, and operated. The same rigor that protects your operational record protects the engineers who maintain it, the infrastructure it runs on, and the integrations that bring your existing data into it.

Regular penetration testing by independent security firms

Automated vulnerability scanning on every deployment

Security incident response plan with defined escalation procedures

Employee security awareness training and background checks

Secure software development lifecycle (SDLC) practices

Dependency monitoring and timely patching of vulnerabilities

Network segmentation and least-privilege access principles

Responsible disclosure program for security researchers

Questions about how we protect your operational record?

Vendor reviews, compliance questionnaires, residency requirements, technical security walkthroughs — we'll work through whatever your procurement and security teams need.