Security

Site plans for stations, airports, and hospitals can be sensitive. Here is exactly how we protect them, and what we don't claim.

How your data is protected

Every request is checked against your workspace. Asking for another workspace's records returns “not found.”
Roles (owner, admin, coordinator, contributor, viewer) are enforced on the server, not just hidden in the interface.
Who drew, approved, or resolved something always comes from the signed-in account and can't be changed by the browser.
Uploaded plans are stored privately and served only through short-lived signed links.
Share links use random 32-byte tokens stored as a hash. They can be limited to chosen levels, set to expire, revoked at any time, and are hidden from search engines.
Every change is recorded in an audit log with before and after values.
Sign-in uses one-time email links. We don't store passwords.

We're not SOC 2 audited and we don't offer single sign-on today. If you need either, tell us, so we know how many people are asking.