Security & compliance

How we protect your data.

What protects your construction data, stated plainly.

Protection

What we do.

Encrypted at rest

Data stored in our database is encrypted at rest with AES-256, provided by our database host, Supabase.

Encrypted in transit

Traffic between your browser or phone and our servers is encrypted with TLS, and we serve the app over HTTPS only.

Company-scoped data

Every request is scoped to your company by tenant ID, and Postgres row-level security policies add a second layer at the database.

Infrastructure

Built on Supabase + Vercel.

The infrastructure your data runs on.

Cloud providerAWS us-east-1 (via Supabase and Vercel)
Platform recoveryService restored to its last known good copy after an outage
DatabasePostgreSQL (Supabase managed)
Hosting and edgeVercel
Your data

We believe your data belongs to you.

Full stop.

We Never Sell Your Data

Your project data, documents, and company information are never sold to third parties — ever. Period.

Your Data, Your Copies

Download reports, PDFs and documents anytime. We do not keep backups for individual companies or recover data on request, so keep your own copies.

Access Ends With Your Plan

Cancel anytime. Your plan runs to the end of the paid period, then access stops. We do not recover or hand back data after a plan ends. You can request deletion at any time.

Responsible disclosure

Found a vulnerability? Tell us.

We take all reports seriously. Please email us at security@saguarocontrol.net and we will respond as quickly as we can. We do not pursue legal action against good-faith researchers.

  • We acknowledge every report
  • We prioritize critical findings
  • We credit researchers who disclose responsibly

Questions about security?

Our security team is here to help.