Security and hosting
Your safety records stay in the UK
UK hosted health and safety software: where jobsafe keeps your records, who inside your organisation can see what, and how you get it all out.
Where the data lives
London, and nowhere else
The London region
London region (Supabase on AWS eu-west-2). Storage and processing by jobsafe stay in the UK.
Each organisation walled off
Row-level security in the database: a query from your organisation can only ever return your organisation’s rows.
Private file storage
Photos, videos and PDFs sit in a private bucket per organisation, served only to signed-in members of it.
Data is encrypted in transit (TLS) and at rest by the hosting provider, which also takes the backups. The exact encryption and backup terms are those of the hosting plan; ask for the current statement before relying on it.
Access
Six role levels, and a history on every record
Who can open, edit, approve and close is decided by role, not by asking nicely. The six levels:
- Admin
- HSSE manager
- Site manager
- Supervisor
- Operative
- Contractor
Contractor is a role level of its own, so a contractor sees the permit and the site they are on, not your registers.
Per-record history
Who changed what and when, on every record.
Soft deletes
Nothing vanishes; a deleted record is marked and kept.
Roles and multi-site
Sites and depots with their own people; role decides what each sees.
CSV export
Every register exports, with the filters you applied.
Certifications
Only what is held
This page lists a certification only once it is held. None is listed today; that line changes the day one is.
Ask support@jobsafe.cloud for the current position, and for a security questionnaire to be completed.
Documents
What you can ask for, and where it is
- Data processing agreementOn request from support@jobsafe.cloud.
- Sub-processorsListed in the privacy notice.
- Privacy noticeWhat is collected, why, and for how long.
- Security contactReport a concern to support@jobsafe.cloud.
Related: how offline records reach the cloud · pricing · contact
FAQ
Frequently asked questions
The questions an IT lead asks before sign-off.
In the London region (Supabase on AWS eu-west-2). It does not leave the UK region for storage or processing by jobsafe.
No. Each organisation is walled off by row-level security in the database and has its own private file storage. A query from one organisation cannot return another’s rows.
Yes. Every register exports to CSV, so your records are yours to take at any time.
Deletes are soft: the record is marked deleted and kept, so an audit can still see what was there and who removed it.
Yes, on request from support@jobsafe.cloud. The sub-processors are listed in the privacy notice.
Bring your IT lead to the demo.
Thirty minutes, and we will answer the security questionnaire on the call.