Security and operational trust
SitePilot uses authenticated access, role-based application controls and HTTPS transport to protect access to construction project records. This page describes current controls at a practical level without claiming certifications that have not been independently verified.
SitePilot users access protected workspaces through authenticated sessions. Customer and operations areas use authorization controls so public visitors cannot open private application routes.
Application permissions are assigned by role and responsibility. Construction teams can separate administrative, sales, project, site and finance access instead of sharing one spreadsheet or account password.
Product records use company-scoped query filters and tenant checks. Tenant document storage is separated by company identifier, and protected APIs require tenant context before serving workspace data.
Production traffic is redirected to HTTPS and the application enables HSTS outside development. Configured SQL Server connections use encrypted transport.
Authorised administrators can review application data-change audit records, login activity and access sessions. Session-management controls support revocation when access must be withdrawn.
The repository does not establish a public backup frequency, retention period, recovery objective or disaster-recovery SLA. These requirements must be confirmed in the applicable proposal or service agreement before purchase.
The product includes a first-login setup workflow and tenant provisioning checklist. Training and migration assistance are provided only as included in the selected plan or agreement scope.
Customers remain responsible for choosing authorised users, protecting credentials, reviewing access when roles change and avoiding sensitive information in unapproved channels.
Yes. SitePilot includes role and permission controls for authorised application users.
Yes. Production requests are redirected to HTTPS and HSTS is enabled outside development.
No certification claim is made on this page. Request current security and contractual documentation from the SitePilot team.
Backup frequency and retention should be confirmed for the hosting arrangement and service plan in the applicable agreement.
Use the SitePilot contact or authenticated support channel and do not include passwords or payment credentials in the message.
Discuss your projects, users and operating process with the SitePilot team.
Book a demo