{"id":12,"date":"2026-09-09T16:18:47","date_gmt":"2026-09-09T16:18:47","guid":{"rendered":"https:\/\/integritysafetyworks.com\/?page_id=12"},"modified":"2026-09-09T16:38:07","modified_gmt":"2026-09-09T16:38:07","slug":"security","status":"publish","type":"page","link":"https:\/\/integritysafetyworks.com\/?page_id=12","title":{"rendered":"Security"},"content":{"rendered":"<div class=\"wp-block-group blk hero is-layout-flow wp-block-group-is-layout-flow\"><div class=\"wp-block-group wrap is-layout-flow wp-block-group-is-layout-flow\"><p class=\"eyebrow wp-block-paragraph\">Security<\/p><h1 class=\"wp-block-heading\">Your data, in its own database.<\/h1><p class=\"sub wp-block-paragraph\">How Works is built, what we do, and what we do not have yet. Written plainly, because your IT department is going to ask anyway.<\/p><\/div><\/div>\n\n<div class=\"wp-block-group blk sec is-layout-flow wp-block-group-is-layout-flow\"><div class=\"wp-block-group wrap is-layout-flow wp-block-group-is-layout-flow\"><h2 class=\"wp-block-heading\">The architecture, first<\/h2><div class=\"wp-block-group prose is-layout-flow wp-block-group-is-layout-flow\"><p class=\"wp-block-paragraph\">Every client runs on their own WordPress installation with their own database, on their own subdomain. There is no shared multi-tenant schema.<\/p><p class=\"wp-block-paragraph\">That matters more than it sounds. In most safety platforms, every customer&#8217;s data sits in the same tables, separated by a column and a query filter. One mistake in that filter, or one permissions bug, and one customer can see another&#8217;s. That class of failure does not exist here, because there is no query that could reach another client&#8217;s data. The data is not in the same database.<\/p><p class=\"wp-block-paragraph\">It also means your configuration, your forms, and your branding are yours. Nothing about your setup is constrained by what another customer needs.<\/p><\/div><\/div><\/div>\n\n<div class=\"wp-block-group blk sec is-layout-flow wp-block-group-is-layout-flow\"><div class=\"wp-block-group wrap is-layout-flow wp-block-group-is-layout-flow\"><h2 class=\"wp-block-heading\">What we do<\/h2><p class=\"lead wp-block-paragraph\">The controls that are in place today.<\/p><div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\"><div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\"><div class=\"wp-block-group feat is-layout-flow wp-block-group-is-layout-flow\"><h3 class=\"wp-block-heading\">Access<\/h3><ul class=\"wp-block-list\"><li>Multi-factor authentication required on administrator accounts<\/li><li>Role-based access enforced on the server, not hidden in the interface<\/li><li>A foreman sees their own scope, not the company&#8217;s<\/li><li>No public registration on any client installation<\/li><li>Administrative access limited to named staff<\/li><\/ul><\/div><\/div><div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\"><div class=\"wp-block-group feat is-layout-flow wp-block-group-is-layout-flow\"><h3 class=\"wp-block-heading\">Data<\/h3><ul class=\"wp-block-list\"><li>Encrypted in transit with TLS on every installation<\/li><li>Hosted in the United States, single region<\/li><li>Separate database and separate system account per client<\/li><li>Automated backups on a scheduled cadence<\/li><li>Your uploaded documents stay in your installation<\/li><\/ul><\/div><\/div><div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\"><div class=\"wp-block-group feat is-layout-flow wp-block-group-is-layout-flow\"><h3 class=\"wp-block-heading\">Operation<\/h3><ul class=\"wp-block-list\"><li>Automated daily health monitoring across every installation<\/li><li>Failures alert us, not you<\/li><li>Security plugin monitoring on every site<\/li><li>Version-controlled deployment with a documented runbook<\/li><li>Change history on every release<\/li><\/ul><\/div><\/div><\/div><\/div><\/div>\n\n<div class=\"wp-block-group blk sec is-layout-flow wp-block-group-is-layout-flow\"><div class=\"wp-block-group wrap is-layout-flow wp-block-group-is-layout-flow\"><h2 class=\"wp-block-heading\">Straight answers to the usual questions<\/h2><figure class=\"wp-block-table\"><table><thead><tr><th class=\"left\">Question<\/th><th class=\"left\">Answer<\/th><\/tr><\/thead><tbody><tr><td class=\"left\">Is our data separated from other customers?<\/td><td class=\"left\">Yes. Separate database and separate installation per client, not a shared schema.<\/td><\/tr><tr><td class=\"left\">Where is it hosted?<\/td><td class=\"left\">United States.<\/td><\/tr><tr><td class=\"left\">Is it encrypted in transit?<\/td><td class=\"left\">Yes, TLS.<\/td><\/tr><tr><td class=\"left\">Is it encrypted at rest?<\/td><td class=\"left\">[CONFIRM: verify with host before publishing]<\/td><\/tr><tr><td class=\"left\">Do you have a SOC 2 report?<\/td><td class=\"left\">No. We are a small company and have not been through a SOC 2 audit. We will tell you that up front rather than after your procurement process has started.<\/td><\/tr><tr><td class=\"left\">Has the platform been penetration tested?<\/td><td class=\"left\">Not yet. It is on our list.<\/td><\/tr><tr><td class=\"left\">Do you support single sign-on?<\/td><td class=\"left\">Not yet. Multi-factor authentication is available today.<\/td><\/tr><tr><td class=\"left\">Do you publish an uptime SLA?<\/td><td class=\"left\">No. We would rather not publish a number we cannot stand behind on our current architecture. We will tell you honestly what our availability has actually been.<\/td><\/tr><tr><td class=\"left\">How often are backups taken and have you tested a restore?<\/td><td class=\"left\">[CONFIRM: state frequency, retention, and a tested restore time]<\/td><\/tr><tr><td class=\"left\">What happens to our data if we leave?<\/td><td class=\"left\">It is yours. [CONFIRM: define exactly what is delivered and in what timeframe]<\/td><\/tr><tr><td class=\"left\">Who are your subprocessors?<\/td><td class=\"left\">[CONFIRM: publish the list]<\/td><\/tr><tr><td class=\"left\">Will you sign a data processing agreement?<\/td><td class=\"left\">[CONFIRM: not yet drafted]<\/td><\/tr><\/tbody><\/table><\/figure><p class=\"note wp-block-paragraph\">If your procurement process needs a questionnaire completed, send it. We answer them.<\/p><\/div><\/div>\n\n<div class=\"wp-block-group blk sec is-layout-flow wp-block-group-is-layout-flow\"><div class=\"wp-block-group wrap is-layout-flow wp-block-group-is-layout-flow\"><h2 class=\"wp-block-heading\">What we are honest about<\/h2><div class=\"wp-block-group prose is-layout-flow wp-block-group-is-layout-flow\"><p class=\"wp-block-paragraph\">We are a safety consulting firm that builds software, not a hundred-person software company. That is the reason the product understands your job, and it is also the reason we do not have a compliance department.<\/p><p class=\"wp-block-paragraph\">If your organization requires SOC 2 before signing, we are not the right vendor today, and you should know that before you spend three weeks on an evaluation. If your organization wants to know whether its data is properly separated, monitored, and backed up, the answers are on this page.<\/p><\/div><\/div><\/div>\n\n<div class=\"wp-block-group blk sec final is-layout-flow wp-block-group-is-layout-flow\"><div class=\"wp-block-group wrap is-layout-flow wp-block-group-is-layout-flow\"><h2 class=\"wp-block-heading\">Send us the questionnaire.<\/h2><p class=\"lead wp-block-paragraph\">We would rather answer it early than surprise you late.<\/p><div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\"><div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"\/demo\">Get in touch<\/a><\/div><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Security Your data, in its own database. How Works is built, what we do, and what we do not have yet. Written plainly, because your IT department is going to ask anyway. The architecture, first Every client runs on their own WordPress installation with their own database, on their own subdomain. There is no shared [&hellip;]<\/p>\n","protected":false},"author":0,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-12","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/integritysafetyworks.com\/index.php?rest_route=\/wp\/v2\/pages\/12","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/integritysafetyworks.com\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/integritysafetyworks.com\/index.php?rest_route=\/wp\/v2\/types\/page"}],"replies":[{"embeddable":true,"href":"https:\/\/integritysafetyworks.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=12"}],"version-history":[{"count":1,"href":"https:\/\/integritysafetyworks.com\/index.php?rest_route=\/wp\/v2\/pages\/12\/revisions"}],"predecessor-version":[{"id":31,"href":"https:\/\/integritysafetyworks.com\/index.php?rest_route=\/wp\/v2\/pages\/12\/revisions\/31"}],"wp:attachment":[{"href":"https:\/\/integritysafetyworks.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=12"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}