Last updated July 20, 2026
Your map and field data stays yours.
You retain ownership of data you upload and sync.
Protected in transit and at rest.
RBAC and least-privilege defaults.
Authenticated API access with rotatable credentials.
All customer-facing endpoints require TLS. Internal service communication uses encrypted channels.
Sensitive customer data at rest is encrypted using industry-standard algorithms on managed storage services.
Administrative and customer access is governed by role-based permissions. Default roles follow least-privilege principles.
Teams, territories, and admin functions can be scoped to specific roles. Account owners manage user provisioning and deprovisioning.
MFA is available for qualifying enterprise accounts. We recommend enabling MFA for all administrative users.
Passwords are hashed using strong algorithms. Minimum complexity requirements apply. Password managers are encouraged.
API access requires authenticated credentials. Keys should be stored securely, rotated periodically, and never embedded in client-side applications.
Production secrets are stored in secure configuration systems with restricted access. Secrets are not committed to source control.
Sessions use secure cookies with appropriate expiration. Suspicious login activity may trigger additional verification.