↓ Skip to main content
RosterSure

Security & Data Residency

Construction compliance data is sensitive. It proves you did your due diligence. We treat it with the security and strict data residency controls that Ontario General Contractors require.

1. Hosted in Canada (Data Residency)
#

We do not store your data in the US or overseas.

  • Core Infrastructure: Hosted in the AWS Canada (Central) region (ca-central-1).
  • Backups: Encrypted backups remain exclusively within Canada.
  • Compliance: Aligned with PIPEDA requirements for Canadian businesses.

2. Delete-on-Termination
#

We believe you should control your data lifecycle, not us.

  • Active Accounts: We retain history to keep you audit-ready.
  • Closed Accounts: If you cancel, your data is permanently deleted from our active systems. We do not hoard your subcontractor lists.

3. Role-Based Access Control (RBAC)
#

Not everyone needs to see everything. RosterSure enforces strict permission levels:

  • Admins: Full control over billing and account settings.
  • Project Managers: Access limited to their assigned projects.
  • Auditors: Read-only access with PII redaction (hiding personal emails/phone numbers) for external reviews.

4. Infrastructure Security
#

  • Encryption: All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
  • Payments: Processed securely via Stripe; we never touch or store raw credit card numbers.