Where your evidence lives, and who reaches it.

• The API and the database run on managed infrastructure in the EU. Every connection to the API is encrypted.
• Photos, certificates and documents are held in object storage, separate from the database.
• Astraeus Technology Limited is the processor. Your firm is the controller of its own data.

• A six-digit code sent to the email address on the account.
• A passkey, set up after the first sign-in, using the phone or laptop the person already unlocks.
• No passwords. There are none to store, none to leak and none to reuse from another site.

• Every plot, stage, photo and document belongs to one firm, and that firm is checked on every request, not just at sign-in.
• Members of your firm are the owner and the managers you invite. Nobody else in the product can reach your plots.
• A subcontractor is never a member of your firm. They see only the stages they have been invited to and assigned.
• A subcontractor sees no other plot, no other trade's stages, and no price other than the one on the stage they are working.
• Invite links are stored hashed, expire after fourteen days and can be revoked from the stage at any time.

• Every state change is written to an append-only audit log: who published a stage, who was invited and who accepted, each with the time it happened. Approvals and send-backs go in the same log.
• Database triggers reject any attempt to update or delete an audit row, including ours.
• Submitted photos and documents are stored exactly as they arrived, with a hash of each file taken on receipt, and are locked against change by the same mechanism.

• Ask us and we will export your firm's data, including the photos and documents, and send it to you.
• Ask us to delete it and it is deleted within thirty days.
• A plot export you can run yourself from the console, as a single downloadable bundle.

If you believe you have found a security problem, email hello@builtstraight.com with what you did and what you saw. We reply within one working day and we will not come after anybody for reporting something in good faith.