Trust Center
Security & Compliance
Your inspection data is critically important. Here's how we protect it.
Encryption
Data is encrypted at rest and in transit. Photos and records are timestamped; deployments that enable C2PA signing store a self-verified content manifest with each signed photo, so undetected edits can be detected.
Data Retention
Compliance records retained per your service agreement (default 7 years). Secure deletion with certificate upon request.
Access Controls
Role-based access control (RBAC) with per-company permissions. Access is scoped so users only see the companies and locations they belong to, and account activity is logged for review.
Encryption & Access Controls
Data encrypted at rest and in transit. Role-based access controls and account activity logging. Independent penetration testing is planned as we move out of beta.
Infrastructure
Hosted on OCI with redundant backups. Automated security patching. DDoS protection via Cloudflare.
Data Portability
Export all your inspection data, photos, and reports at any time. Standard formats (PDF, CSV, JSON) for easy migration.
Questions about security?
Contact our security team at security@complycam.com for our full security documentation, or to schedule a security review.