How we protect your data.
A plain-language summary of how SymmetricOS is designed today. We’re early, and we’d rather be specific than impressive.
Tenant isolation
Hosted and multi-tenant. Every record is tied to one company, and the app and database only return rows for the company you belong to.
Row-level security
Isolation is enforced in the database with Postgres row-level security, not only in app code. We’re building automated cross-tenant tests into our release process.
Encryption via our hosts
Encrypted in transit (TLS) and at rest by our cloud database and hosting providers. Integration credentials live in an encrypted secrets store and are never shown back in the app.
Roles & least privilege
Owner, admin, sales/design, field/ops and read-only roles control who sees what, including pricing. Homeowners see only their own portal.
AI with guardrails
AI features use only your company’s data and stay scoped to your workspace. Agents draft; a person approves anything that goes out.
We don’t sell data
We don’t sell your data or your customers’ data, or share it with other installers. Demos use fictional data only.
What we don’t claim
SymmetricOS doesn’t currently hold SOC 2, ISO 27001 or similar certifications. If one matters to your business, tell us; it helps us prioritize.
Reporting a security issue
Email elliott@symmetricos.com with “Security report” in the subject. A dedicated security contact will be published before general availability.