Security

Your inspection data, safe and yours

Inspections record defects, risks and photos of your sites. That data belongs to you, and it has to be well protected. This is how we go about it.

A manager looks at the overview of open and closed items in PinPoint

An inspection report is more than a form. It shows where your installations are weak, which risks are still open and who has to fix what. That is exactly why a customer, an auditor or your own IT department rightly asks how that data is protected.

Our answer is simple: your data sits in Europe or with you, and only the people you give access see what they need to see. Every change can be traced.

What you can expect from us

Security you do not have to arrange. We look after hosting, updates and backups; you decide who has access.

How we protect your data

Three principles that apply to every customer, from the trial to a rollout across several sites.

Hosted in the EU, or with you

When we run PinPoint, your data sits in data centres in the European Union. If the data has to stay on your own servers, PinPoint runs on-premise on your infrastructure.

Role-based access

Signing in runs through a central identity system, also with a Google account. Roles decide who sees which modules and data. A link to your own SSO is possible as custom work.

Encrypted in transit

All traffic between the app, the portal and our servers is encrypted, whether you work on site with a tablet or write the report at the office.

What that means for you

Everything can be traced. The audit trail keeps who did what and when, even when a change was made through an AI assistant.

Your data stays yours. You export everything whenever you want, to PDF, Excel, CSV or your own systems. If you stop, you take your data with you.

No extra work for your IT. Updates and backups are included in the price when we run PinPoint for you.

Need more detail?

We deliberately do not publish technical details of our infrastructure. If you work with a security questionnaire or need a data processing agreement, we are happy to go through it with you.

Who is responsible for the data in PinPoint?

Under the GDPR you, as the customer, are the controller of the data you record in PinPoint: you decide what is recorded and who has access. PinPoint acts as the processor and only processes that data to deliver the service. Those commitments are set out in a data processing agreement.

Frequently asked questions

Where is my data stored?

When we run PinPoint for you, your data sits in data centres in the European Union. If you choose on-premise, it sits on your own servers and you manage the infrastructure yourself. Either way the data stays yours, and you can export all of it at any moment.

Can PinPoint run on our own servers?

Yes. On-premise suits organisations whose data has to stay in-house, for example for policy reasons or because a customer demands it. PinPoint then runs on your infrastructure, with the same features as in the cloud. We look together at what your environment needs for it.

Who can see my data?

Only the users you give access, within the role you assign them. An inspector sees what they have to inspect, a manager sees the follow-up, an administrator manages users and settings. Every change stays in the audit trail, so you can always trace afterwards who did what.

Do you have a data processing agreement?

Yes. Because you can record personal data in PinPoint, such as names of staff or photos, we set out the commitments on that processing in a data processing agreement. If you have your own template or a security questionnaire from your IT department, we are happy to go through it together.

Not sure if PinPoint fits your process?

We will be honest with you. If PinPoint is not the right fit, we will tell you. No hard sell, no obligations. Just a conversation between people who understand inspections.

Request a demo Or try it for 30 days