Security and your data
InspectFuture holds your firm's inspection photos, notes and reports. This page sets out where they are kept, who else handles them, and how the app protects them, as it is set up for its first trial.
Kept in Australia
When the app goes online for the trial, its database, photos, files and backups are kept on Amazon Web Services in Sydney. Everything travels encrypted between your phone or computer and the app.
Who else handles your data
Four services, each for one job.
- Amazon Web Services, SydneyRuns the app: the database, photo storage and backups.
- Amazon SES, SydneySends sign-in codes and notices to your email address.
- Amazon Bedrock, Sydney or MelbourneDrafts the wording for an item, using Anthropic's Claude model. What it receives is set out below.
- CloudflareProtects the site from attacks. It decrypts traffic at its edge to filter out attacks, passes it on encrypted, and does not store it.
What the AI sees, and what it never sees
When an engineer taps Draft text, the app sends the note typed for that item, the item's label, the inspection's element words (for example "suspended slab"), whether the report opens as satisfied, satisfied except or incomplete, and your firm's style guide. Nothing else.
- It never sends photos, the site address, the client's or contact's name, the engineer's name, the job number or your firm's name from the project's records.
- If one of those names is typed into a note, the app replaces it with "[redacted]" before sending. It can only do this for names it knows, so a subcontractor's name typed into a note would still be sent. Keep people's names out of notes.
- Under Amazon Bedrock's terms, what is sent and what comes back are not used to train models and are not shared with Anthropic.
- Every drafted sentence is labelled as an AI draft until an engineer checks it and signs it off. Drafting is optional: an engineer can always write the wording themselves.
Photos
The location (GPS) and camera details are removed from every photo before it's stored. Photos are never sent to the AI.
Signing in
- There are no passwords to steal or reuse. You sign in with a one-time code sent to your email, and can add a passkey after your first sign-in.
- You can see every device signed in to your account, remove any of them, or sign out everywhere at once.
Each firm's data is kept apart
Every request is checked against the firm it belongs to. Automated tests sign in as one firm and try to reach another firm's data through every part of the app, and they run on every change.
A record of who did what
Sign-ins, device changes, report and photo-set downloads, and exports are written to an audit log that can be added to but not edited.
How long things are kept
Once a report is approved, its photos and files are deleted from the cloud after your firm's retention period: 30 days, or anywhere from 7 to 90 days as your firm's admin chooses. An admin can keep a report's files for one extra period, once. Backups delete them within another 30 days. The files of record are the ones your firm downloads and keeps.
Found a security problem?
Please email trial@surjaset.com with "Security" in the subject. We read every report and will reply.