Security

Data in Transit

TLS 1.3 encryption for all connections

Data at Rest

AES-256 encryption for stored data

Passwords

Bcrypt hashing (never stored in plaintext)

API Keys

Encrypted secret management

Authentication

Firebase Authentication with email/phone verification

Two-Factor

2FA available via SMS or authenticator app

Session Management

Secure session tokens with automatic expiration

Role-Based Access

Granular permissions (View, Edit, Admin)

Cloud Provider

Google Cloud Platform / Firebase

Data Centers

North America (US and Canada regions)

Redundancy

Multi-zone replication for high availability

Backups

Daily automated backups with 30-day retention

Version History

All changes tracked with timestamps and user attribution

Activity Logs

Complete audit trail for compliance

Data Export

Full export capability for your records

Rollback

Restore previous versions of surveys and maps

Export Formats

GeoJSON, KML, KMZ, PDF, GeoPDF

Full Export

Download all your data at any time

Post-Cancellation

30 days to export after subscription ends

No Lock-In

Your data is always yours to take

Response Time

Security incidents addressed within 24 hours

Notification

Affected users notified within 72 hours of breach discovery

Contact

security@roadscope.app for security concerns

Bug Bounty

Responsible disclosure program available