Your construction data is your business. We protect it with industry-standard practices and clear documentation of who touches it.
Effective Date: May 16, 2026
Opsite Solutions LLC is committed to protecting your data. As a construction management platform, we understand that you entrust us with sensitive business information including financial data, contracts, client details, and project documentation. We take this responsibility seriously and describe our practices honestly on this page.
Each contractor's data is logically isolated. Users can only access data for contractors they are explicitly authorized to view. Our role-based access control system ensures that team members only see what they need to do their job.
We use a small set of vetted service providers to deliver core functionality. When you connect optional integrations like QuickBooks, we use OAuth 2.0 authentication; we never store your third-party passwords. The full subprocessor list with data categories and region is published in our Privacy Policy.
Our AI features (document categorization, Lino assistant) process your data via Anthropic's Claude API to provide intelligent recommendations. This processing happens in real time and we do not use your data to train general-purpose AI models. Your business data remains private and is never shared with other customers.
Documents, photos, and attachments uploaded to Opsite are stored in Supabase's enterprise cloud infrastructure. Files are encrypted at rest and in transit. Access is controlled through the same role-based permissions as other data.
All primary data is stored in the United States. Backups are stored in geographically separate U.S. regions for disaster recovery. We do not store customer data outside the United States unless specifically requested and agreed upon in writing. For Enterprise customers requiring specific data residency arrangements, please contact us at security@useopsite.com.
Vercel and Supabase, our hosting and database providers, are SOC 2 Type II certified. Opsite is not independently SOC 2 certified at this time.
Our data handling is designed to align with the principles of the EU General Data Protection Regulation. A Data Processing Addendum is available on request to enterprise customers.
We honor data-subject access, deletion, and opt-out requests under the California Consumer Privacy Act and Global Privacy Control browser signals.
We follow secure coding practices, including input validation, output encoding, parameterized queries, and regular code reviews focused on security.
We regularly update dependencies and monitor for known vulnerabilities using automated security scanning tools.
Internal access to production systems is strictly limited, requires authentication, and is logged for audit purposes.
We have documented incident response procedures and will notify affected users promptly in the event of any security incident that may affect their data.
We conduct annual third-party penetration testing of our application and infrastructure. Critical and high-severity findings are remediated within 30 days. We also perform continuous automated vulnerability scanning of our codebase and dependencies. Results of penetration tests are available to Enterprise customers under NDA upon request.
We maintain documented business continuity and disaster recovery plans. Key commitments include:
We take security vulnerabilities seriously. If you discover a potential security issue, please report it to us responsibly:
Email our security team: security@useopsite.com
Please include as much detail as possible about the vulnerability, including steps to reproduce. We commit to acknowledging reports within 48 hours and will work with you to understand and resolve the issue promptly.
We welcome security researchers to report vulnerabilities through our responsible disclosure program. We commit to:
Please report vulnerabilities to security@useopsite.com with the subject line "Security Vulnerability Report."
Security is a shared responsibility. To help keep your account secure:
Opsite maintains cyber liability insurance and errors & omissions (E&O) insurance policies appropriate for a technology platform handling sensitive business data. Details of coverage are available to Enterprise customers upon request.
If you have any questions about our security practices, please contact us:
Security inquiries: security@useopsite.com
General support: support@useopsite.com
Privacy concerns: privacy@useopsite.com