How we protect your data.
What protects your construction data, stated plainly.
What we do.
Encrypted at rest
Data stored in our database is encrypted at rest with AES-256, provided by our database host, Supabase.
Encrypted in transit
Traffic between your browser or phone and our servers is encrypted with TLS, and we serve the app over HTTPS only.
Company-scoped data
Every request is scoped to your company by tenant ID, and Postgres row-level security policies add a second layer at the database.
Built on Supabase + Vercel.
The infrastructure your data runs on.
| Cloud provider | AWS us-east-1 (via Supabase and Vercel) |
| Platform recovery | Service restored to its last known good copy after an outage |
| Database | PostgreSQL (Supabase managed) |
| Hosting and edge | Vercel |
We believe your data belongs to you.
Full stop.
We Never Sell Your Data
Your project data, documents, and company information are never sold to third parties — ever. Period.
Your Data, Your Copies
Download reports, PDFs and documents anytime. We do not keep backups for individual companies or recover data on request, so keep your own copies.
Access Ends With Your Plan
Cancel anytime. Your plan runs to the end of the paid period, then access stops. We do not recover or hand back data after a plan ends. You can request deletion at any time.
Found a vulnerability? Tell us.
We take all reports seriously. Please email us at security@saguarocontrol.net and we will respond as quickly as we can. We do not pursue legal action against good-faith researchers.
- We acknowledge every report
- We prioritize critical findings
- We credit researchers who disclose responsibly
