Compliance software has to be trustworthy. Here is how we protect the data you trust us with.
All data is encrypted in transit (TLS 1.2+) and at rest. Documents live in access-controlled, encrypted object storage.
Every table is protected by Postgres row-level security so your organization's data is isolated at the database layer — not just the app layer.
Owner / admin / member / viewer roles. Viewers are read-only at the database level. Service-role access is server-only and never exposed to the browser.
Every meaningful action is recorded with a timestamp and actor in an organization-wide audit log you can export at any time.
Generate a complete compliance report — every contractor, document, and date — in seconds for auditors and investors.
GDPR-aware data handling and a SOC 2-ready posture. We collect the minimum data needed to do the job.
Security question or report? security@contractortrackr.com