Security
Your jobsite data, handled like it matters.
We're a small team. Security is non-negotiable. This page lists exactly how we handle the things you'd ask about in a vendor security questionnaire, and where we are on the formal certifications.
Strict access controls per organization
Every read and every write is checked against the requesting user's organization. There is no cross-tenant data access path, by design. Your data stays inside your account.
Encrypted at rest and in transit
All your data is encrypted while it sits in storage and encrypted while it moves between your device and our servers. Industry-standard transport security on every connection.
Sign-in and session integrity
Email plus Google and Apple sign-in. Sessions roll over automatically on a short cycle. Login cookies are locked down so they can't be lifted or replayed.
Audit trail
Every voice command, schedule change, and major action is recorded in a tamper-proof history. Full record exportable on request.
Incident response
If we detect a security issue, we'll notify affected customers within 72 hours per GDPR norms. Email security@buildficient.com to report something.
Certifications status
- SOC 2 Type II: In progress. Targeting completion within the next 12 months.
- GDPR / CCPA: Data processing addendum available on request. We honor data export and deletion requests within 30 days.
- Sub-processors: Cloud hosting and database, AI services, email delivery, SMS delivery, payments, error monitoring, and product analytics. Full named list available on request as part of the DPA.
Stop typing in trucks. Start talking to your jobsite.
14-day free trial. No card required.