Your construction data protected at every layer — from the database to your browser.
Security Features
256-bit AES Encryption
All data at rest is encrypted using AES-256, the same standard used by banks and government agencies. Your data is unreadable without your credentials.
TLS 1.3 in Transit
Every byte transferred between your browser and our servers is protected with TLS 1.3. We enforce HTTPS everywhere and reject older protocols.
Row-Level Security
Powered by Supabase RLS policies. Each user can only access their own organization's data — enforced at the database layer, not just the application layer.
GDPR Compliant
We honor data subject rights: access, correction, deletion, and export. Data processing agreements available. EU residents can request their data at any time.
Penetration Testing
Annual third-party penetration tests are conducted by independent security firms. Findings are remediated within 30 days. Reports available under NDA for Enterprise customers.
Built on Supabase + Vercel
Industry-leading infrastructure so you can focus on building — not on uptime.
Cloud Provider
AWS us-east-1 (via Supabase + Vercel)
Uptime SLA
99.9% monthly — Enterprise 99.99%
Platform Recovery
Service restored to its last known good copy after an outage
Point-in-Time Recovery
Restore to any second in the last 7 days
CDN & Edge Network
Vercel global edge — <50ms for 95% of users
Database
PostgreSQL 15 (Supabase managed)
Our Data Practices
We believe your data belongs to you. Full stop.
We Never Sell Your Data
Your project data, documents, and company information are never sold to third parties — ever. Period.
Your Data, Your Copies
Download reports, PDFs and documents anytime. We do not keep backups for individual companies or recover data on request, so keep your own copies.
Access Ends With Your Plan
Cancel anytime. Your plan runs to the end of the paid period, then access stops. We do not recover or hand back data after a plan ends. You can request deletion at any time.
Responsible Disclosure
Found a security vulnerability? We take all reports seriously. Please email us at security@saguarocontrol.net and we will respond within 24 hours. We do not pursue legal action against good-faith researchers.
✓ We acknowledge receipt within 24h✓ We remediate critical findings within 7 days✓ We credit researchers who disclose responsibly