Trust and security
Security and privacy you can build on.
Smart Site Plan is built for professional and public-sector work. Here is exactly how we protect your data and stand behind the platform, in language your security team can review.
Summarizes Trust Center. Last updated · Version security-2026-07-01
Security posture
How we protect your data
Encryption everywhere
Data is encrypted in transit with TLS and at rest. Secrets are managed, tenants are isolated, and connections to the API are authenticated.
Strong authentication
Passwordless one-time codes, two-factor, and passkeys. Organizations can enforce strong-factor MFA across every member.
Immutable audit trail
Every mutating action is appended to a tamper-evident activity log, with retention up to a year on Team and custom on Enterprise.
Scoped access control
Role-based project access and member management keep each project visible only to the people who should see it.
Reliability and uptime
A 99.9% uptime target, a public status page, and a Service Level Agreement for Team and Enterprise.
Privacy by design
GDPR and CCPA support, a Data Processing Agreement, a published subprocessor list, and a WCAG 2.1 AA-aligned, Section 508 aware interface.
Identity and access
Connect your identity provider and manage every member centrally.
- OIDC single sign-on (Enterprise)
- SCIM provisioning and deprovisioning (Enterprise)
- Enforced multi-factor authentication org-wide
- Passkeys and hardware-key support
- Session and device management
Your data, your control
No lock-in. Take everything with you, any time.
- You own your data, always. Export everything at any time.
- Pro exports: GeoJSON, KML, CSV, GPX, DXF, GeoTIFF, and PDF.
- Defined data-deletion timelines on account closure.
- Data is processed and stored in US regions.
Built to support your security review
The authoritative policies are linked below. For SSO setup, a signed DPA, or a detailed security package, contact us and we will work with your team.
Bring it to your security team
Send them the policies above, or ask us for a security package, VPAT, or signed DPA. Start free while procurement runs its review.
Or skip the tour. Type any address.
Opens the live map at that exact spot. No account, no install.