Enterprise Security You Can Rely On
Your building data is safety-critical. Our platform is built to protect it.
Security Architecture
- Authentication: Firebase Auth with RS256 JWTs, validated by a GCP API Gateway on every request.
- Data Isolation: Every company's data is isolated using Row-Level Security (RLS) at the database level. No application code can bypass it.
- File Security: All files are stored in Google Cloud Storage with signed, time-limited access URLs — never public.
- Audit Trail: An immutable event log records every action: file upload, design decision, risk approval, and more.
- Certification: UK Cyber Essentials certified. GDPR compliant.