Security

• Hosting: Microsoft Azure in the United States.
• Encryption: HTTPS in transit; AES-256 at rest for the database, files and backups.
• Access control: every request is checked against organization and project access, and roles limit what each person can do. The Owner can do everything, including billing, ownership and closing the account. Admins can do everything else across all of the company's projects. Users can view drawings and ask questions on the projects they are added to; they create and delete nothing.
• Audit log: an activity history of project records, membership, roles, billing and deletions.
• Deletion: only an Owner or Admin can delete a project, and it is permanently deleted right away. After a subscription ends, data is permanently deleted.

Report a security issue to security@statebranch.com.