Where your data lives
- Your data is stored in Australia, on AWS.
- Drawings are read and processed by AI in Australia.
- We use customer data to fine-tune Tracta's own AI model. You can ask us to turn this off.
Security at Tracta.
What we do to protect the drawings and records you keep in Tracta, and what we don't have yet.
How it's protected
- Data is encrypted in transit with TLS.
- Data is encrypted at rest.
- Production, staging and development are kept separate.
- Privileged access to production systems is logged.
- Planned maintenance is announced in advance.
The audit log
- Tracta keeps an append-only log of uploads, issues, views, acknowledgements and edits, with who did it and when.
- Tracta provides no way to edit or delete a log entry.
Signing in
- You sign in with an email code, or with an optional password you set in Settings.
Reporting a vulnerability
- Email security@tracta.com.au with what you found, how to reproduce it and the impact you see. We'll acknowledge your report and keep you informed as we look into it.
What we don't have yet
- Multi-factor authentication or single sign-on.
- SOC 2 or ISO 27001 certification, or a third-party penetration test report.
- Single-tenant hosting.