Your safety data, treated like safety data

All traffic to Safety Insight Hub is served over HTTPS with TLS provided by our hosting platform.

Sign-in supports email and password, optional Google sign-in, and multi-factor authentication for any account. Password sign-in has leaked-password protection and a short-window lockout after repeated failed attempts. Users can review recent sign-in activity from Settings.

Every record is scoped to the workspace that owns it via row-level security in the database. Role-based permissions (employee, supervisor, safety manager, admin, executive, auditor) are enforced server-side, not just in the UI.

Hosted on the Lovable Cloud platform, which runs on managed Supabase / AWS infrastructure with isolated tenants per workspace.

The underlying managed Postgres platform performs its own backups. We do not currently offer a customer-facing restore-to-point-in-time control from inside the app.

Changes to critical records (incidents, near misses, hazards, corrective actions, permits, and others) are logged with a timestamp, the action, and the full before/after payload. The acting user is captured where the change originated from a signed-in session; system-initiated writes are labelled "system". Admins, safety managers, and auditors can view the audit log inside the app.