Security

This page is maintained by SiteRep Works to describe the security practices currently in place across the platform. It is not a third-party certification.

1. Platform hosting

SiteRep Works workspaces run on modern cloud infrastructure with managed encryption in transit and at rest.

2. Authentication

• Email + password authentication with password hashing.
• Optional Google single sign-on.
• Session tokens rotated on sign-in.

3. Access controls

Data access within each workspace is scoped by row-level security policies so users only see data they are entitled to see. Administrative access is limited to authorized SiteRep Works personnel.

4. Backups

Managed database backups are performed by our hosting provider on a regular schedule.

5. Incident response

Suspected incidents are triaged by SiteRep Works and communicated to affected customers as required by law.

6. Responsible disclosure

Report suspected vulnerabilities to security@siterepworks.company. Do not publicly disclose issues before we have had a reasonable opportunity to remediate.

7. Shared responsibility

Customers are responsible for managing their user accounts, safeguarding credentials, and configuring workspace access appropriately.