Security & Compliance
BuildRevu holds the documents, site records, quality, safety and handover evidence that construction projects are managed and audited on. Here is how we protect that data.
How we protect project data
Access control
Access is scoped by organisation, project, role and module permissions. New customers can create a workspace, while people joining an existing team use a secure invitation that places them inside the correct boundaries.
Audit trail
Every document, revision and decision is numbered and timestamped, and the record is immutable once issued. Revisions move in strict sequence and can't be reopened out of order, so there is always a single, tamper-evident history of what was submitted, reviewed and decided — and by whom.
Approval integrity
Formal decisions (A/B/C/D) can only be issued by the relevant manager, not by reviewers commenting on a submission. Snag and non-conformance closures require sign-off from the party who raised them, not the party who fixed them — preventing self-certification.
Verifiable reports
Exported close-out and status reports carry a scannable QR stamp for independent verification, with each organisation's own logo and signatories shown on its reports.
Data ownership
You own your project data. Registers, reports and correspondence can be exported at any time in standard formats (Excel, PDF).
Encryption
Connections are protected by TLS 1.2+ in transit and data is encrypted at rest.
Infrastructure
Hosting & data residency
Hosted on Lovable Cloud infrastructure. Regional hosting is available on request.
Backups & disaster recovery
Automated backups with point-in-time recovery. Detailed RTO/RPO information is available on request.
Uptime
Lovable Cloud targets high availability. A formal SLA is available on request.
Certifications
We are working toward SOC 2 / ISO 27001 certification. We will update this page as formal attestations are completed.
Sub-processors
We use Lovable Cloud for hosting and authentication, and a notification/email provider for alerts. A full sub-processor list is available on request.
Questions?
For security questionnaires, vendor risk assessments, or specific compliance documentation, contact us at hello@buildrevu.com.