Security
Plain claims. No badge we did not earn.
We do not put certification logos on this page. If a customer’s order requires a specific report, it is an exhibit to that order, not a picture in the footer.
Transport and storage
The apps and this website are served over HTTPS. Customer records, including photos, are encrypted at rest by the infrastructure we run on. We do not run the product on a single office server in Pittsburgh. Backups exist, and they are covered by the same access rules as the live record.
Who can see a record
On Route and Plant, people in your workspace see the routes they are on, according to the role: inspector, supervisor, or administrator. An inspector cannot close another person’s deficiency. That is a product rule, not a policy paragraph we hope you remember. Works adds SSO so you can shut a person off when they leave, and a read-only auditor seat that cannot record or close.
Retention
Route and Plant keep records for the life of the subscription and 90 days after it ends, then delete them, including photos. Works can set a different schedule in the order, including a shorter one if your counsel wants the open items gone on a date. Export before that date if you need a copy. We do not keep a private archive “just in case” after the schedule says delete.
This marketing site
tidep.xyz does not set a cookie and does not load an analytics script. The docs search index is a file we generated when we built the site. It does not phone home. Mail you send is mail. There is no chat widget.
Reporting
If you find a problem, write to security@tidep.xyz. Include the route or the URL, and what you expected. We would rather have a short note today than a formal process that nobody finishes. We do not pay a public bounty. We do answer.
Please do not try a customer’s account to make the point. Use your own, or describe the issue against this website.