Siteline Security and Reliability Guide

At Siteline, we know that trust is earned, and security is central to that trust. This document provides a clear overview of how we secure customer data, maintain platform reliability, and support enterprise-readiness through transparent and well-structured practices. It reflects the standards we hold in serving construction accounting teams across the industry.

Siteline is built on secure, modern cloud infrastructure. We rely on Google Cloud Platform (GCP) to ensure our architecture is resilient, scalable, and protected by one of the world’s most trusted cloud providers. All customer data is encrypted—both at rest and in transit—and every component of our stack runs in secure, monitored environments.

We protect your data by ensuring only the right people have access to it. From your team to ours, Siteline enforces strict access control policies. Authentication is handled by Firebase with secure session tokens. Role-based access ensures that only authorized users can view or modify data. Internally, we enforce 2FA and follow least-privilege principles.

Your billing data is critical. We treat it like it is. We take frequent, encrypted backups to ensure you never lose essential financial records. In addition to daily snapshots, we back up before every deployment and retain PDFs permanently. Even in the event of an error or outage, we can restore data quickly.

Siteline integrates with your systems securely and stays in its lane. We connect to ERPs and GC portals through secure HTTPS protocols. Integration permissions are scoped and controlled entirely by the customer. Credentials are encrypted, and Siteline only reads or writes billing-related data, never altering project settings or pushing changes upstream.

We track what matters and protect what’s private. To improve the product and troubleshoot errors, we send limited event data to trusted analytics and debugging tools. We never share sensitive customer data or financials—only scoped metadata like user IDs and basic click/error activity.

We’ve built strong safeguards to stay ahead of threats and respond quickly when issues arise. Siteline has maintained a strong security record since its launch. In rare instances where a third-party provider experienced a breach (e.g., CircleCI, Codecov), we responded immediately by rotating credentials, reviewing systems, and evaluating any potential exposure. While we’re not aware of any unauthorized access, we treat these events seriously and act with caution.

We only use AI where it makes sense and always with control and transparency. Siteline uses AI selectively to streamline specific workflows, like lien waiver validation, powered by Google Gemini. The feature is off by default and does not train on customer data. Any future AI capabilities will follow the same principles: security, transparency, and customer control.

We prioritize practical, reliable security and rely on trusted infrastructure and certified partners to support it. We’ve built Siteline’s infrastructure, data practices, and access controls on a solid foundation. We host our platform on Google Cloud, which adheres to major global compliance standards, and we work with SOC 2-certified partners, like Agave, to ensure secure ERP integrations.

We retain critical financial and project data to support auditability, continuity, and peace of mind. Customer data is stored securely and backed up daily in Google Cloud. We use soft-deletion within our application, meaning most deleted records are preserved in the database unless otherwise specified. We retain key documents, like signed pay applications and attachments, indefinitely.

Siteline is built for reliability, and we constantly monitor our systems to keep it that way. We’ve invested in tools and processes that help us detect and respond to issues in real time. Our infrastructure is backed by high-availability guarantees from providers, like Google Cloud and Cloudflare, and we’re set up to escalate and resolve problems quickly, often before they impact customers.