Where your data is
- All traffic uses HTTPS.
- Your data is stored in the United States. The database is Neon Postgres in us-east-1. Photos and report PDFs are in a Vercel Blob private store in iad1.
- Neon states that customer data is encrypted at rest with AES-256. Vercel states that files in Vercel Blob are encrypted at rest with AES-256.
Who can see it
- Photos and client reports are private. Incident photos and report PDFs are served only to signed-in users of the same company, or through a client link that company created. We check this on every request. Direct links to the storage are refused.
- Client links are yours to switch off. A client link lets anyone who has it read that one site's reports, monthly summaries, site map and photos, without signing in. Share it only with your client. Turn it off in the dashboard and it stops working at once.
- Companies are kept apart. Every company's data is separate. Automated tests check that one company cannot read another company's sites, reports, photos or PDFs.
- Passwords and sign-in. Owner passwords are hashed with scrypt. Sessions and guard device tokens are stored only as SHA-256 hashes.
- Guards stay signed in. A guard stays signed in on their phone until the company signs that phone out.
Reports are never overwritten
Every change to a report is saved as a new version. The earlier versions stay, and each version shows who made it and when. An audit log records changes to sites, checkpoints, guards and settings.
Nothing is lost offline
The guard app saves data on the phone first and sends it when signal returns. The phone deletes its copy only after the server confirms it has the item.
Location
We read a guard's location only at shift start, shift end and checkpoint scans, and only if the guard allows it. There is no background tracking.
How we use your data
We do not train AI on your data. We do not sell your data.
AI writer
The AI writer is optional. When a guard taps “Write it up for me”, we send only the guard's note and the report context (report type, category, severity, site name, local time, checkpoint name and the report's fields) to Anthropic's API to draft the text. We do not send guard phone numbers, email addresses or billing data. Under Anthropic's commercial terms, Anthropic may not train models on this content. The guard reads the draft and chooses to use it or keep their own words. A report written this way is marked, and it keeps the guard's original note.
Backups
Nightly off-site backups of the database and photos are being set up.
Your data, your control
You can export all your data at any time from Settings in the dashboard. To delete your account and its data, email us and we will do it.
Who processes data for us
| Company | What it does for us |
|---|---|
| Vercel | Hosting and file storage |
| Neon | Database |
| Resend | Email, including daily reports and alerts |
| Polar | Payments, as merchant of record |
| Anthropic | Drafts report text with the optional AI writer (only the guard's note and report context) |
| Cloudflare R2 | Backups, once live |
Contact
Security questions: support@patrolsheet.com