Tenant Isolation at the Database
Every query runs under PostgreSQL row-level security as a non-privileged role. Cross-tenant access is blocked by the database itself, not just by application code.
Encrypted at Rest and in Transit
AES-256-GCM encryption for stored credentials with supported key rotation, TLS in transit, and an encrypted local database for offline field work.
Role-Based Access Control
Capability-based permissions from plant managers to third-party contractors, enforced server-side on every request and continuously regression-tested.
SSO and Multi-Factor Authentication
Sign in through your existing identity provider over OIDC or SAML, including Microsoft Entra ID, with multi-factor authentication and scoped session control.
Offline Field Work and On-Premises AI
Inspect with no connectivity and keep AI inference on hardware you control using local models. Your inspection data never has to leave your network.
Tamper-Evident Audit Trail
Every action is recorded with user identity, timestamp, and change detail, hash-chained so an auditor can verify the record rather than take it on trust.
Deploy Where Your Policy Requires
Cloud, on-premises, or fully self-hosted behind your own firewall. Your data stays in the environment you choose.
Security Enforced in the Build
Every change passes automated static analysis, dependency review, container scanning, and secret detection before it can ship.