Security built for construction data.
Your project data, crew records, and business information deserve the same protection as the structures you build. Here is what protects it.
Start Free TrialComplete Security Features
From encryption to compliance, every aspect of the Jointer platform is designed to keep your data safe and your business protected.
Data Encryption
Your data is protected with industry-standard encryption at every layer.
- AES-256 encryption at rest for all stored data
- TLS 1.2+ encryption for all data in transit
- Encrypted database backups
- Secure file storage with encrypted object storage
- Encrypted API communications across all endpoints
Authentication & Access Control
Proven authentication, with sessions you can revoke.
- Secure email & password authentication
- One sign-in opens every Jointer product
- Changing your password signs out every other session
- Password strength enforcement
- Secure token-based session handling
Role-Based Access Control (RBAC)
Granular permissions ensure users only access what they need.
- Organization-level role management
- Admin, Manager, and Member role tiers
- Per-product access controls across all six products
- Feature-level permission gating
- Invite-only organization membership
- Role-based UI and data visibility
Audit Trail & Logging
Change history on the records that matter — who, what, and when.
- Audit log on every safety record change — who, what, and when
- Change history on estimates, proposals, drawings and safety records
- Access logs on shared report links and machine credentials
Infrastructure Security
Enterprise-grade cloud infrastructure with built-in redundancy.
- Hosted on Supabase with PostgreSQL (enterprise-grade)
- Automatic daily database backups
- Application-level rate limiting on the API
- Isolated tenant data architecture
Data Protection & Privacy
Your data belongs to you — we protect it and respect your privacy.
- No selling or sharing of customer data
- Data isolation between organizations
- Secure data export capabilities
- Data retention policies with clear terms
- A published privacy policy, opt-in analytics cookies, and data export, with deletion on request
- Right to data deletion upon request
Application Security
Security is built into every layer of the Jointer platform.
- Input validation and sanitization (DOMPurify)
- Protection against XSS and injection attacks
- Clickjacking protection: other sites cannot frame Jointer
- Secure API design with parameterized queries
- Row-level security (RLS) on all database tables
- Automated dependency vulnerability scanning
Business Continuity
Built to keep running, and to come back quickly when something does break.
- Automatic database backups
- Nightly automated backups and a written restore runbook
- Updates roll out without scheduled maintenance windows
- Global CDN for fast, reliable access
Compliance & Standards
Built to meet the compliance requirements of construction businesses.
- OSHA compliance tracking (Safe)
- Cal/OSHA flagging on courses you build, tracked per employee
- G702/G703-style application for payment
- CFR 1904 record-keeping support
- Audit-ready documentation and reports
- Digital signature capture for legal compliance
Error and Backup Alerts
Errors, backups and dependencies are watched automatically.
- Real-time error monitoring (Sentry integration)
- Automated alerts on high-priority errors and backup failures
- Documented error-triage and restore runbooks
- Regular security reviews and updates
- Proactive vulnerability patching
Device & Network Security
Secure access from any device, anywhere.
- HTTPS enforced on all connections
- Secure cross-origin resource sharing (CORS)
- Offline field data is encrypted at rest on the device, under a key that never leaves it
- Your sign-in session is the exception — the browser stores it the standard way, and signing out clears the encrypted caches with it
- Responsive design — no third-party app installs required
Data Storage & Backups
Reliable storage with multiple layers of backup protection.
- PostgreSQL database with proven reliability
- Automatic daily backups with retention
- Encrypted backup storage
- Secure file and document storage
- Photo and attachment encryption
- Export your data anytime in standard formats
Security Across Every Product
Each Jointer product inherits the full platform security stack, plus product-specific protections.
Job
- Encrypted estimate and project data
- Role-based access to financial information
- Digital signature verification
- Secure document storage and PDF generation
- Audit trail on all estimate changes
Safe
- Encrypted crew certification records
- QR code verification with tamper protection
- OSHA compliance data protection
- Secure training completion records
- Privacy-safe crew member profiles
Crib
- Encrypted tool inventory records
- Secure check-in/check-out tracking
- Protected maintenance history
- Location data encryption
- Audit trail on all tool transfers
Fab
- Encrypted fabrication tracking data
- Secure stage-gate transition history
- Protected shipping and delivery records
- Heat number traceability with audit trail
- QR code scanning with secure verification
Our Security Commitment
At Jointer, security isn't an afterthought — it's foundational to everything we build. Jointer holds estimates, safety records, tool inventories and fabrication data, and we take protecting them seriously.
We continuously review and improve our security practices, perform regular dependency audits, and keep dependencies patched.
Found a vulnerability or have a security concern? Write to security@getrivet.io. Our security.txt lists the same contact.
Your Data, Always Accessible
We believe your data belongs to you. Jointer's data export lets you download your records and uploaded files from 6 modules at any time — no questions asked.
Job
Project management, estimating, proposals, daily work orders, change orders, RFIs, purchase orders, T&M invoices, job costs, drawings, meetings, vendors and insurance certificates — plus files attached to records: projects, RFIs, change orders, estimates, purchase orders, certifications, course resources and more; audio recorded when someone asked Jointer to listen in on a meeting or site walk (item 164); deleted after the org's keep-audio window; company logos and branding images
Safe
Certifications, trainings, employee invites, LMS courses and sessions, training tracks, SkillBuild content, pre-task plans, JSAs, permits, toolbox talks, observations and incidents, safety audit log — plus certification documents, training records and signatures; SkillBuild course files
Crib
Tool tracking, inventory, locations, transactions, service alerts, rentals, usage and equipment rates — plus tool photos and QR code images
Fab
Fabrication component tracking, photos, stage transitions, machines and schedule — plus component photos; mill certs and weld inspection certificates
Chem
Chemical inventory, permits, inspections, findings, MAQ tracking, SDS sheets, exposures, parties, reports and HMBP filings — plus Safety Data Sheet (SDS) files; photos and files attached to findings; inspection photos and permit documents
Lineup
Crew roster, skills, credentials and welding certifications, schedule assignments, time entries and pay rates
Ready to get started?
Start your 14-day free trial today. No credit card required. Your data is protected from day one.