For corporate IT

Security

This is what the system does today. It is not a certification, and it does not claim more than that.

• Sign-in

  An administrator adds people. There is no public sign-up. Sign-in is a username and a password. Microsoft Entra, Okta, and other company single sign-on are not available.

• Who can see a job

  A person's role and location decide what they can open. One company does not see another's jobs.

• On the server

  The application is hosted on Vercel. The database is Postgres, operated by Neon. Traffic uses HTTPS. Passwords are hashed. They are not stored as typed. We do not offer a private database per company, and we do not pin a region in a contract. We do not have a SOC 2 report.

• On the device

  A permit kept for offline use is encrypted in the browser. The key stays in the browser for this site and cannot be exported. Someone using that signed-in browser can still open the permit. Lock the tablet. A copy used only while a tab is open is not encrypted, and it is gone when the tab closes.

• Who else touches the system

  Vercel hosts the application. Neon holds the database. Those are the subprocessors.

• Taking data out

  A location's records can be downloaded by someone with that access. Removing a company is done from the master account. There is no self-serve button that deletes a whole company.

• How long records stay

  Closed permits and stop-work history stay for three years unless that company’s own policy says longer. Turning off a login does not delete the job.

• Who opened what

  The records page keeps an audit log of changes a leader makes: who, what, and when. It is not a log of every page view.

• SOC 2

  There is no SOC 2 report. The roadmap is a written control list, a penetration test, then a Type I and a Type II. None of those are done.

• Company sign-in

  Company sign-in is an email and a password. It opens the same floor as a username. Microsoft Entra and Okta are not available.