Security

Built to hold evidence-grade data

This page summarises our practices. For certifications, pen-test reports or DPAs under NDA, contact sales@infacility.com.

Tenant isolation

Every record is scoped to your organisation. Queries are org-filtered by default and location-level restrictions apply for non-admin roles.

Role-based access

Viewer, Technician, Manager, Admin and SuperAdmin roles with least-privilege defaults and a full access audit trail.

Encryption

TLS in transit and encrypted storage at rest. Photo evidence and exports are served over signed, short-lived URLs.

Audit logging

Field-level change history with actor, device and timestamp — the same trail customers show insurers and regulators.