Security and data
What is true about your data today
Only controls that are in the product now are listed here. Nothing on this page is a plan.
Where your data lives
- Database in the EU
- Your venue records are stored in a managed PostgreSQL database hosted in Frankfurt, Germany.
- Operators kept apart by the database
- Each operator’s records are separated by row-level security in the database itself, not only by the application in front of it.
Who can see what
- Roles and permissions
- Every user holds a role, and every change is checked against that role’s permissions on the server. Template roles are read-only; you clone one to make your own.
- Sensitive areas need their own permission
- Incidents, statutory injury reports, security operations and rates each need a dedicated read permission. A role without it is refused, and counts are withheld rather than shown as zero.
Medical data about injured people
- A permission no template role carries
- Reading a casualty’s identity and clinical notes needs a permission that must be granted to a named person on purpose.
- A password, re-entered
- Even with that permission, the password must be entered again, verified on the server, and the access lasts ten minutes.
- Every look is logged
- Each attempt to open a casualty’s identity is recorded in a log that cannot be edited or deleted.
- Erased after one year
- The personal details are erased automatically after one year by a daily scheduled job. The non-identifying safety record is kept.
Records that stay records
- Not deletable
- Incidents, site sign-ins, key issues, patrol logs and work orders cannot be deleted. An entry made in error is corrected or closed with an explanation.
- History written by the database
- Work-order history and permit history are written by the database on every state change, and the work-order history cannot be altered afterwards.
- Who did it is not the caller’s to say
- Who raised, reviewed or recorded something is taken from the signed-in session, never from what a form sends.
- Who changed what
- Creates, changes and deletes are recorded with who made them, and listed newest first on an activity screen.
This website
- No trackers, no cookies
- This site sets no cookies, loads no analytics and no third-party scripts or fonts, and runs no JavaScript.
Questions from your security team?
Book a demo and bring them. We will answer from the product, not from a brochure.