Security & Privacy

Your company's data is isolated

Every record is tagged with your organization, and isolation is enforced by the database itself — Postgres Row Level Security — not by application settings that could be misconfigured. Another company can never query your data, under any circumstance.

Enforcement: database-layer RLS on every table

Inspection photos are private

Originals and AI-annotated photos live in a private, encrypted storage bucket. No photo has a public URL — every view requires a signed, short-lived link issued to an authenticated member of your organization.

Encryption: TLS in transit · AES-256 at rest

Every action is on the record

Photo capture, AI findings, assignments, closures, and views are written to a tamper-evident audit log: who, when, and from what device. Entries are append-only and hash-chained — no user, including admins, can alter or delete them. Built for MSHA dispute defense.

Integrity: append-only + SHA-256 hash chain

AI never trains on your photos

Photo analysis uses Anthropic's commercial Claude API. Under Anthropic's commercial terms, your photos and analysis results are never used to train AI models, and API inputs and outputs are automatically deleted from Anthropic's systems within 7 days.

Verify it yourself: Anthropic — is my data used for model training?

Provider: Anthropic commercial API · 7-day retention · no training

You own your data

Export your complete data set at any time from the Reports page — printable PDF reports, CSV, and a full JSON export of every record your organization can see. Request deletion of all your data and it will be confirmed within 30 days.

If you cancel your subscription, nothing is deleted for 90 days, so you always have time to export first. Stratum never sells, shares, or discloses customer data to any third party.

Formats: PDF · CSV · JSON — self-serve, no support ticket

Questions or requests

Export, deletion, and offboarding requests — or anything your IT department wants to know — go to sethwindsor8@protonmail.com. Deletion requests are confirmed in writing within 30 days.

Full policy: privacy policy