Security built for evidence that has to hold up
A construction record is only valuable if it is trustworthy. BuildOS is designed around strict tenant isolation and an audit trail that cannot be quietly rewritten.
Tenant isolation
- Every record belongs to a workspace
- Row level security on all tenant tables
- Project and record level permissions
- Clients never see internal costs or margin
- Trades never see commercial data unless authorised
Auditability
- Append-only activity ledger
- Creation, edit, status and approval events captured
- Document revision history retained
- Export events logged
- Approvals are permanently attributable
Data protection
- Encrypted storage
- Signed URLs for file access
- Session management and password policy
- MFA-ready architecture
- Rate limiting readiness
Your data rights
- Consent and privacy settings
- Cookie consent
- Full data export
- Project archive export
- Account deletion workflow
BuildOS is preparing for GDPR compliance. We do not claim certifications that have not been achieved, and this page describes implemented and planned controls rather than accreditation.
RLS
On every tenant table
Append-only
Activity ledger
Signed
Document access URLs
Evidence that holds up
Built to survive the awkward conversation
Disputes are settled by records, not memory. Workspace isolation keeps commercial data away from clients and trades, and the activity ledger is append-only — approvals, edits and exports are permanently attributable.