Security & data protection

Site records are evidence. We treat them that way.

Private by default

Photos, voice notes and reports are held in private storage and only opened through short-lived, permission-checked links.

Your data is encrypted in transit and at rest.

Hosted on infrastructure that holds ISO 27001 certification and a SOC 2 Type II report.

Each user sees only their own records, plus any team access they choose to grant.

Edit or delete records at any time, export everything as PDF, and delete your account from inside the app.

ICO registered (ZC258358). Our Privacy Policy explains exactly how your data is used.

We can provide a data processing agreement (DPA), our sub-processor list and completed security questionnaires.

Last reviewed: October 2026