logo
Trust & Security

Enterprise Grade Infrastructure, Governance & Operational Continuity

The Intelligent Safety Portal is built to support regulated operations, audit scrutiny, and enterprise governance expectations. Security and operational controls are foundational not optional.

Security Foundations

Secure Cloud Infrastructure

  • The platform is delivered as a managed cloud service designed for enterprise workloads.
  • Core data services operate on managed PostgreSQL infrastructure provisioned in East US (Ohio), with Canada (Central) available where required. Application delivery and deployments are managed through controlled CI/CD workflows to reduce operational risk and ensure stability.

Data Residency & Hosting Controls

  • Customer data is stored within the selected region and remains logically isolated within platform tenancy controls.
  • Where data residency is required, Canada (Central) deployment can be provisioned to support Canadian operational and regulatory expectations. Region selection is documented and available to clients upon request.

Access Control & Identity Management

  • Access is enforced through role-based access control aligned to organizational structure and site responsibilities.
  • Permissions can be scoped by location, function, and module to support least-privilege access across multi-site operations.
  • Authentication mechanisms include encrypted credential storage, secure token-based sessions, and email/password or magic-link login options.
  • Identity Roadmap (SSO)
  • Microsoft single sign-on is planned to support centralized identity governance for organizations using Microsoft 365 and Azure Active Directory. Additional identity integrations may be prioritized based on client requirements and risk profile.

Encryption & Data Protection

  • All connections to the platform are secured using industry-standard TLS encryption in transit.
  • Data at rest is protected through encryption controls provided by the managed cloud database and storage infrastructure. This includes structured records, uploaded documents, and system-generated evidence.

Auditability & Governance

Audit Logs & Traceability

The platform maintains detailed audit logs across operational workflows to support investigations, internal reviews, and compliance audits.

Logs cover authentication events and key system actions including:

  1. Record creation

  2. Edits and deletions

  3. Status changes

  4. Approvals

  5. File uploads

Audit data is exportable by module to support evidence packages and regulatory requests.

Governance Controls

Workflow controls are designed to align with internal standards and regulatory frameworks.

Oversight structures support:

  1. Multi-site governance

  2. Role-based visibility

  3. Consistent enforcement of process states

  4. Evidence preservation as part of execution

The system maintains traceability across events, actions, records, and approvals.

Operational Resilience

Backup, Recovery & Retention

  • Automated daily backups are maintained with point-in-time recovery capabilities to support operational resilience.
  • Backup retention is currently configured for weekly retention, with extended retention options available based on client requirements.
  • Recovery procedures are designed to restore service while preserving record integrity.

Reliability & Continuity

  • The platform is designed to support continuous use across locations without process disruption.
  • Controlled releases are deployed through established deployment pipelines with staged rollouts to reduce operational risk.
  • Service monitoring and uptime tracking are implemented to support enterprise operational expectations.

Privacy & Compliance Alignment

The platform is operated in alignment with PIPEDA principles for handling personal information in Canada.

Security controls are structured to align with widely accepted enterprise security frameworks, including SOC 2 principles. Formal SOC 2 certification is planned as part of the compliance roadmap.

Compliance posture is reviewed and updated as regulatory and client requirements evolve across industrial and multi-site environments.

Security & Procurement Contact

For security reviews, vendor onboarding, or procurement documentation requests:

support@intelligentsafetyportal.com

Additional documentation including security overviews, data handling practices, and sub-processor details are available under NDA or upon request.

Talk to Security

Identify Gaps in Your Current Setup

A short, structured self-assessment to help you reflect on how safety, quality, and ESG workflows are handled today - based entirely on your inputs.