Enterprise-Grade Security.Built for Construction.
Your project data, crew records, and business information deserve the same protection as the structures you build. Rivet secures every byte with industry-leading practices.
Start Free TrialComplete Security Features
From encryption to compliance, every aspect of the Rivet platform is designed to keep your data safe and your business protected.
Data Encryption
Your data is protected with industry-standard encryption at every layer.
- AES-256 encryption at rest for all stored data
- TLS 1.2+ encryption for all data in transit
- Encrypted database backups
- Secure file storage with encrypted object storage
- Encrypted API communications across all endpoints
Authentication & Access Control
Proven authentication, with sessions you can revoke.
- Secure email & password authentication
- Sign in with Google (optional — email & password always available)
- Cross-subdomain single sign-on (SSO)
- Changing your password signs out every other session
- Password strength enforcement
- Secure token-based session handling
Role-Based Access Control (RBAC)
Granular permissions ensure users only access what they need.
- Organization-level role management
- Admin, Manager, and Member role tiers
- Per-product access controls across all six products
- Feature-level permission gating
- Invite-only organization membership
- Role-based UI and data visibility
Audit Trail & Logging
Change history on the records that matter — who, what, and when.
- Audit log on every safety record change — who, what, and when
- User action tracking with timestamps
- Change history on estimates, proposals, drawings and safety records
- Data modification tracking
- Access logs on shared report links and machine credentials
Infrastructure Security
Enterprise-grade cloud infrastructure with built-in redundancy.
- Hosted on Supabase with PostgreSQL (enterprise-grade)
- Automatic daily database backups
- Application-level rate limiting on the API
- Isolated tenant data architecture
Data Protection & Privacy
Your data belongs to you — we protect it and respect your privacy.
- No selling or sharing of customer data
- Data isolation between organizations
- Secure data export capabilities
- Data retention policies with clear terms
- GDPR-aligned privacy practices
- Right to data deletion upon request
Application Security
Security is built into every layer of the Rivet platform.
- Input validation and sanitization (DOMPurify)
- Protection against XSS and injection attacks
- Content Security Policy (CSP) headers
- Secure API design with parameterized queries
- Row-level security (RLS) on all database tables
- Automated dependency vulnerability scanning
Business Continuity
Built to keep running, and to come back quickly when something does break.
- Automatic database backups
- Documented disaster-recovery and restore procedures
- Zero-downtime deployments
- Global CDN for fast, reliable access
Compliance & Standards
Built to meet the compliance requirements of construction businesses.
- OSHA compliance tracking (RivetSAFE)
- Cal/OSHA flagging on courses you build, tracked per employee
- G702/G703-style application for payment
- CFR 1904 record-keeping support
- Audit-ready documentation and reports
- Digital signature capture for legal compliance
Monitoring & Incident Response
Errors, backups and dependencies are watched automatically.
- Real-time error monitoring (Sentry integration)
- Automated alerts on high-priority errors and backup failures
- Documented error-triage and restore runbooks
- Regular security reviews and updates
- Proactive vulnerability patching
Device & Network Security
Secure access from any device, anywhere.
- HTTPS enforced on all connections
- Secure cross-origin resource sharing (CORS)
- Offline field data is encrypted at rest on the device, under a key that never leaves it
- Your sign-in session is the exception — the browser stores it the standard way, and signing out clears the encrypted caches with it
- Responsive design — no third-party app installs required
Data Storage & Backups
Reliable storage with multiple layers of backup protection.
- PostgreSQL database with proven reliability
- Automatic daily backups with retention
- Encrypted backup storage
- Secure file and document storage
- Photo and attachment encryption
- Export your data anytime in standard formats
Security Across Every Product
Each Rivet product inherits the full platform security stack, plus product-specific protections.
RivetCORE
- Encrypted estimate and project data
- Role-based access to financial information
- Digital signature verification
- Secure document storage and PDF generation
- Audit trail on all estimate changes
RivetSAFE
- Encrypted crew certification records
- QR code verification with tamper protection
- OSHA compliance data protection
- Secure training completion records
- Privacy-safe crew member profiles
RivetGEAR
- Encrypted tool inventory records
- Secure check-in/check-out tracking
- Protected maintenance history
- Location data encryption
- Audit trail on all tool transfers
RivetFAB
- Encrypted fabrication tracking data
- Secure stage-gate transition history
- Protected shipping and delivery records
- Heat number traceability with audit trail
- QR code scanning with secure verification
Our Security Commitment
At Rivet, security isn't an afterthought — it's foundational to everything we build. As a platform trusted by construction businesses to manage estimates, safety records, tool inventories, and fabrication data, we take the responsibility of protecting your information seriously.
We continuously review and improve our security practices, perform regular dependency audits, and stay current with industry best practices. Our team monitors for vulnerabilities and responds quickly to any potential threats.
Have a security question or want to report a concern? Contact us at hello@getrivet.io.
Your Data, Always Accessible
We believe your data belongs to you. Rivet's data export lets you download your records and uploaded files from 5 modules at any time — no questions asked.
RivetCORE
Project management, estimating, proposals, daily work orders, change orders, RFIs, purchase orders, and T&M invoices — plus files attached to records: projects, RFIs, change orders, estimates, purchase orders, certifications, course resources and more; company logos and branding images
RivetSAFE
Certifications, trainings, employee invites, LMS courses, SkillBuild content, safety audit log — plus certification documents, training records and signatures; SkillBuild course files
RivetGEAR
Tool tracking, inventory, locations, transactions, service alerts — plus tool photos and QR code images
RivetFAB
Fabrication component tracking, photos, stage transitions — plus component photos
RivetGUARD
Chemical inventory, permits, inspections, findings, MAQ tracking, SDS sheets — plus Safety Data Sheet (SDS) files; photos and files attached to findings; inspection photos and permit documents
Ready to get started?
Start your 14-day free trial today. No credit card required. Your data is protected from day one.