Your job, your data, your call
SiteScope holds contracts, drawings, photographs of people's homes and the record of how a job was run. Here's how that's kept.
Access decided at the database
Every table has Row Level Security on it. Who can see a project, a document or a diary entry is a rule the database applies to every query — including ones that don't come through our interface. Hiding a button is not a security model.
Roles that are actually distinct
Owner, admin, employee, subcontractor and client are separate roles with separate rights. A client can't read your site diary or your internal messages, and that's enforced rather than assumed.
Files are private by default
Photos, drawings and certificates live in private storage. Nothing has a public URL. Access is a short-lived signed link issued to somebody the database has already agreed should have it.
An audit trail nobody can edit
Database triggers record who changed what and when, with the old and new values, across the core record of every job — programme, tasks, diary, photos, snags, documents, messages, inspections and certificates. The log is append-only at the database level — not editable by your team, and not by us. It goes only with the company itself, when its owner deletes it.
Sign-in handled properly
Supabase Auth, with the session verified on the server on every request. A new account is confirmed with a one-time code rather than a link, and a password reset only happens when you press its button or type its code — so a mail scanner opening the email can't use either up. Links in our emails only ever go to SiteScope.
AI within the same walls
FlowAI runs every lookup and every change on your own session, so it inherits exactly your access and no more. It proposes changes rather than making them, and some actions aren't available to it at all.
Sharing is a decision, not a default
Bringing a client into a job shouldn't mean opening the books.
Clients see
- Their own project, and only their own
- Progress, stages and the milestones you share
- Photos of their job
- Documents you've marked visible
- The project thread and their own snags
- The agreed price, what's due and their invoices
Clients never see
- What the job costs you, or what you're making on it
- The site diary — hours, workers, issues, deliveries
- Internal notes between your team
- Documents you haven't shared
- Any other project, client or company
What we don't claim
Are you certified to ISO 27001 or SOC 2?
Not today. We'd rather say so than imply otherwise with a badge. What we can describe precisely is above, and we're happy to walk a prospective customer through the actual access model.
Where is the data held?
In Ireland, in the EU: Supabase's managed Postgres in its eu-west-1 region, with files in the same project's private storage, and the app's server code running beside it in Dublin. Get in touch if you have a specific residency requirement.
Is there a data processing agreement?
Yes, and you don't need to ask for it: our data processing terms are part of the terms of service, and list every supplier that handles your data. Read the data processing terms
Can I get my data out?
Yes. Documents and photos download as the files you put in, and the handover pack gathers a project's record into a single PDF. Ask us if you want a full export of an account.
Does FlowAI train on my projects?
No. Project data is sent to the model to answer the question in front of it and nothing more. Turn FlowAI off and nothing leaves the database at all.
Do you hold card details?
No. Paying for a plan happens on Stripe's own page, and the card goes to Stripe rather than to us. We keep what Stripe tells us back — the plan, monthly or yearly, and whether it's paid — which is all we need.
What happens if I stop paying?
Your data stays. Cancel and the plan runs to the end of the period you've paid for, then the account moves to Free. Dropping to a smaller plan stops you adding more projects, clients or team members — it never deletes what's already there.
Found something?
If you believe you've found a security issue, email support.sitescope@kudu-digital.com with enough detail to reproduce it. We'll come back to you, and we won't take issue with anyone reporting one in good faith.