{"id":25375,"date":"2023-02-20T02:36:01","date_gmt":"2023-02-20T02:36:01","guid":{"rendered":"https:\/\/sitemate.com\/?page_id=25375"},"modified":"2025-06-24T05:17:46","modified_gmt":"2025-06-24T05:17:46","slug":"security","status":"publish","type":"page","link":"https:\/\/sitemate.com\/au\/resources\/security\/","title":{"rendered":"Security"},"content":{"rendered":"

Sitemate Security<\/h1>\n\t

Have full confidence in your data accessibility, control and security with Sitemate’s best practice network and application security, access controls, incident monitoring and SOC-2 compliance.<\/p>\n\t\t\t\n\t\t\t\t\t\t\tTry it for free\n\t\t\t\t\t<\/a>\n\t\t\t\n\t\t\t\t\t\t\tWatch demo\n\t\t\t\t\t<\/a>\n\t\n\t

Trusted by companies, projects and teams of every size<\/p>\n\t\n\n\n\n\n\n\n\n\n\n\n\n\n\t<\/p>\n

~10,000 employees<\/p>\n

\n\n\n\n\n\n\n\n\n\n\n\n\n\t\n\n\n\n\n\n\n\n\n\n\n\n\n\t\n<\/p>\n

~500 employees<\/p>\n

\n\n\n\n\n\n\n\n\n\n\n\n\t\n\n\n\n\n\n\n\n\n\n\n\n\n\t\n<\/p>\n

~10 employees<\/p>\n

\n\n\n\n\n\n\n\n\n\n\n\n\t\n\n\n\n\n\n\n\n\n\n\n\n\n\t\n<\/p>\n

~25,000 employees<\/p>\n

\n\n\n\n\n\n\n\n\n\n\n\n\t\n\n\n\n\n\n\n\n\n\n\n\n\n\t\n<\/p>\n

~200 employees<\/p>\n

\n\n\n\n\n\n\n\n\n\n\n\n\t\n\n\n\n\n\n\n\n\n\n\n\n\n\t\n<\/p>\n

~1,500 employees<\/p>\n

\n\n\n\n\n\n\n\n\n\n\n\n\t\n\n\n\n\n\n\t\n<\/p>\n

~600 employees<\/p>\n

\n\n\n\n\n\t\n\n\n\n\n\n\t\n<\/p>\n

~6,000 employees<\/p>\n

\n\n\n\n\n\t\n\n\n\n\n\n\t\n<\/p>\n

~30,000 employees<\/p>\n

\n\n\n\n\n\t\n\n\n\n\n\n\t\n<\/p>\n

~400 employees<\/p>\n

\n\n\n\n\n\t\n\n\n\n\n\n\t<\/p>\n

~40 employees<\/p>\n

\n\n\n\n\n\n\t\n\n\n\n\n\n\t<\/p>\n

~5,000 employees<\/p>\n

\n\n\n\n\n\n\t\n\n\n\n\n\n\t<\/p>\n

~1,000 employees<\/p>\n

\n\n\n\n\n\n\t\n\n\n\n\n\n\t<\/p>\n

~1,200 employees<\/p>\n

\n\n\n\n\n\n\t\n\t\n\t\n\t\n\t

SOC-2 Certified<\/p>\n\t

Trusted by Systems & IT teams all over the world<\/h2>\n\t

SOC 2 defines criteria for managing customer data based on five “trust service principles”-security, availability, processing integrity, confidentiality and privacy.<\/p>\n

SOC 2 certification & compliance assures Sitemate customers and users that Sitemate has the infrastructure, tools, and processes to protect their information from unpermitted access – both from within and outside the firm.<\/p>\n

All Sitemate policies & procedures are formed around adhering to these global standards.<\/p>\n\t\n\t\n

JUMP TO SECTION<\/strong><\/p>\n

Network and application security<\/a><\/p>\n

Identity & Access Management<\/a><\/p>\n

Incidents and monitoring<\/a><\/p>\n

Dashpivot product security<\/a><\/p>\n

Privacy<\/a><\/p>\n\t

Network and application security<\/h2>\n\t

Data Hosting<\/h3>\n\t

Sitemate runs on AWS’s global cloud infrastructure.<\/p>\n

Sitemate uses Platform as a Service (PaaS) services, due to their enhanced security and safety.<\/p>\n

The system operates on a multi-tenant architecture.<\/p>\n

Geographic Data Residency Controls and control over where your data is hosted and stored is available on the Enterprise Pricing Plan which can be seen here.<\/a><\/p>\n\t

Cloud Management<\/h3>\n\t

AWS Config is used to monitor compliance and configuration across all Sitemate Services,
enabling assessing, auditing, and evaluating configuration of all Sitemate resources.<\/p>\n\t

Data Safety & Backup<\/h3>\n\t

Data is processed & stored in PaaS database services, with live fail-over replicas. For example, the form database service has one write & 2 read nodes. Snapshot backups are taken daily (stored for 7 days) & weekly (stored for 4 weeks).<\/p>\n

Photos & videos are stored within Amazon S3 and stored across at least three devices in a single AWS Region.<\/p>\n

Failover & backups are tested as per Sitemate DR\/BCP policies.<\/p>\n\t

Encryption<\/h3>\n\t

All data is encrypted at rest (AES256-CBC) & in transit (TLS 1.2+).<\/p>\n\t\n\t

NIST CSF<\/h2>\n\t

NIST CSF provides a broad, risk-based approach for organizations to manage cybersecurity risks. It provides a structured and comprehensive approach to managing cybersecurity risks and enhancing the company’s resilience against potential threats.<\/p>\n

NIST Cybersecurity Framework helps Sitemate stay proactive and prepared for evolving cyber threats, safeguarding customer data.<\/p>\n\t\n\t

Identity & Access Management<\/h2>\n\t

Authentication & Authorisation<\/h3>\n\t

Authentication is controlled via a combination of a custom Sitemate auth service sitting on top of AWS Cognito & FusionAuth.<\/p>\n\t

Authorization in Dashpivot is via Role Based Access Control (RBAC). Access to data is defined within Dashpivot based on business and security requirements – either preventing or allowing users from viewing and editing data.<\/p>\n\t\n\t\n\t

SSO (Single Sign On) and MFA (Multi-factor Authentication)<\/h3>\n\t

Improve security by using Single Sign-On, ensuring that only permitted users are able to access the platform.<\/p>\n

With SSO, users don’t have to remember multiple secure passwords, which can be time-consuming and frustrating.<\/p>\n

Sitemate supports Microsoft Azure, Okta and Rippling.<\/p>\n

The OAuth2 framework is used for verifying user permissions and access control. OAuth2 is a protocol that allows a user to grant a third-party web site or application access to the user’s protected resources, without necessarily revealing their long-term credentials or even their identity.<\/p>\n\t

Which Users does SSO impact?<\/h3>\n\t

Single Sign-On is for Dashpivot Contributor users only, who are your managers, supervisors and administrators, allowing for greater control over your systems and login access to your main business systems.<\/p>\n

SSO does not impact Dashpivot Visitors or Sitemate free users or require detailed logins on their side so they can still quickly, easily and securely access your workspaces.<\/p>\n\t\t\t\n\t\t\t\t\t\t\tTry it for free\n\t\t\t\t\t<\/a>\n\t\t\t\n\t\t\t\t\t\t\tWatch demo\n\t\t\t\t\t<\/a>\n\t\n\t\n\t

Incidents and monitoring<\/h3>\n\t

Never lose any data with ongoing and multi-location backups, and quickly recover or restore any records accidentally deleted or removed.<\/p>\n

Data is processed & stored in PaaS database services, with live fail-over replicas.<\/p>\n\t

Photos & videos are stored within Amazon S3 and stored across at least three devices in a single AWS Region.<\/p>\n

Failover & backups are tested as per Sitemate DR\/BCP policies.<\/p>\n\t

Sitemate has an SLA of 99.99% uptime of the available minutes on a monthly basis.<\/p>\n\t\n\t\t\t\t\"Dashpivot\n\t

Dashpivot product security<\/h3>\n\t

Full access controls over internal user management<\/h3>\n\t

Give the right access and permissions to the right people with a number of different and easily editable permission types.<\/p>\n

Remove access with a single click – once people no longer need access, they won’t be able to edit, delete or access private information.<\/p>\n\t\n\t\n\t

Separate and flexible permissions for external users or ‘visitor’ users<\/h3>\n\t

Give external visitor users more refined and constrained access to specific folders and information so they can see what you want them to see, and nothing else.<\/p>\n

Visitors are completely free, so you get the benefits of having them involved in your digital processes with none of the risks.<\/p>\n\t

Flexible folder access control<\/h3>\n\t

Control your overarching internal records with a flexible folder structure, so that people only have access to the information that is applicable to them.<\/p>\n

For example, certain workers may only need access to the information from one site, so just grant them access to that specific site folder.<\/p>\n

Layer permissions on top of folder controls and you have highly secure and completely flexible controls over who gets access to what and why.<\/p>\n\t\t\t\n\t\t\t\t\t\t\tTry it for free\n\t\t\t\t\t<\/a>\n\t\t\t\n\t\t\t\t\t\t\tWatch demo\n\t\t\t\t\t<\/a>\n\t\n\t\n\t

Automated historical logs of all changes<\/h3>\n\t

Have full visibility on changes made on your documentation with historical logs for all forms and templates.<\/p>\n

All logs are shipped to our central security hub, which is a combination of AWS Security Hub, Cloud Watch & DataDog.<\/p>\n\t

Manage pending invites<\/h3>\n\t

Always have full control over who can have access to your data by managing pending invites.<\/p>\n

If someone has been sent an invite, you can delete their invite so they can’t access your data once they accept a rescinded invite.<\/p>\n\t\t\t\n\t\t\t\t\t\t\tTry it for free\n\t\t\t\t\t<\/a>\n\t\t\t\n\t\t\t\t\t\t\tWatch demo\n\t\t\t\t\t<\/a>\n\t\n\t\n\t

Search, Sort and Bulk Actions on User Management<\/h3>\n\t

Make it quick and easy to manage large number of user controls and permissions.<\/p>\n

Search for users, sort or select multiple users to make changes en masse.<\/p>\n\t

Auto-logout removed users<\/h3>\n\t

Users are auto-logged out of the Dashpivot mobile app when they are removed as a Contributor or Visitor.<\/p>\n

Keep your data safe by removing access to users that no longer need it.<\/p>\n\t\t\t\n\t\t\t\t\t\t\tTry it for free\n\t\t\t\t\t<\/a>\n\t\t\t\n\t\t\t\t\t\t\tWatch demo\n\t\t\t\t\t<\/a>\n\t\n\t\n\t

Approval Signature Logic<\/h3>\n\t

Using custom logic for approval signatures in your form templates helps you control which people on your team can sign-off forms at each stage of a workflow.<\/p>\n

This could be useful for meeting compliance requirements and ensuring that the right person signs the workflow form, based on their user type, or permission type.<\/p>\n\t\n\t

Archiving Folders<\/h3>\n\t

Manage your folders better with archiving once projects are completed or teams have finished their part of the project.<\/p>\n

Archived folders can still be accessed and restored in case they’re accidentally archived.<\/p>\n\t\t\t\n\t\t\t\t\t\t\tTry it for free\n\t\t\t\t\t<\/a>\n\t\t\t\n\t\t\t\t\t\t\tWatch demo\n\t\t\t\t\t<\/a>\n\t\n\t\n\t\n\t

Archiving Templates<\/h3>\n\t

Clean up your list of templates by archiving templates that are no longer used or have been replaced by newer versions or different workflows.<\/p>\n

You can still access archived templates, which makes it easier to update your templates if there’s any information there, or to review version control.<\/p>\n\t\n\t

Archiving Lists<\/h3>\n\t

Archive your lists for people, cost codes, equipment and materials once projects are completed or they have been superseded.<\/p>\n

You can restore archived lists if they were archived accidentally or if the same list needs to be re-used for another project.<\/p>\n\t\t\t\n\t\t\t\t\t\t\tTry it for free\n\t\t\t\t\t<\/a>\n\t\t\t\n\t\t\t\t\t\t\tWatch demo\n\t\t\t\t\t<\/a>\n\t\n\t\n\t

Privacy<\/h3>\n\t

GDPR compliant<\/h3>\n\t

Sitemate is GDPR compliant, so all your data remains GDPR compliant, too.<\/p>\n

GDPR can be considered as the world’s strongest set of data protection rules, which enhance how people can access information about them and places limits on what companies can do with personal data.<\/p>\n\t

Privacy policy<\/h3>\n\t

Read more about the Sitemate Privacy Policy here: https:\/\/sitemate.com\/resources\/privacy-policy\/<\/a><\/p>\n\t\n\t

Award winning software – as voted by people like you<\/h3>\n\t\n\t\n\t\n\t\n\t\n\t\t\t\n\t\t\t\t\t\t\tRead some of our reviews here\n\t\t\t\t\t<\/a>\n\t

Software that people love to use and can trust, try it for free now.<\/h2>\n\t\t\t\n\t\t\t\t\t\t\tTry it for free\n\t\t\t\t\t<\/a>\n\t\t\t\n\t\t\t\t\t\t\tWatch demo\n\t\t\t\t\t<\/a>\n\t","protected":false},"excerpt":{"rendered":"

Sitemate Security Have full confidence in your data accessibility, control and security with Sitemate’s best practice network and application security, access controls, incident monitoring and SOC-2 compliance. Try it for free Watch demo Trusted by companies, projects and teams of every size SOC-2 Certified Trusted by Systems & IT teams all over the world SOC…<\/p>","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"industry":[],"product":[],"region":[],"system":[],"content_type":[],"class_list":["post-25375","page","type-page","status-publish","hentry"],"acf":[],"custom_permalink":"resources\/security","_links":{"self":[{"href":"https:\/\/sitemate.com\/au\/wp-json\/wp\/v2\/pages\/25375","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sitemate.com\/au\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/sitemate.com\/au\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/sitemate.com\/au\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/sitemate.com\/au\/wp-json\/wp\/v2\/comments?post=25375"}],"version-history":[{"count":0,"href":"https:\/\/sitemate.com\/au\/wp-json\/wp\/v2\/pages\/25375\/revisions"}],"wp:attachment":[{"href":"https:\/\/sitemate.com\/au\/wp-json\/wp\/v2\/media?parent=25375"}],"wp:term":[{"taxonomy":"industry","embeddable":true,"href":"https:\/\/sitemate.com\/au\/wp-json\/wp\/v2\/industry?post=25375"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/sitemate.com\/au\/wp-json\/wp\/v2\/product?post=25375"},{"taxonomy":"region","embeddable":true,"href":"https:\/\/sitemate.com\/au\/wp-json\/wp\/v2\/region?post=25375"},{"taxonomy":"system","embeddable":true,"href":"https:\/\/sitemate.com\/au\/wp-json\/wp\/v2\/system?post=25375"},{"taxonomy":"content_type","embeddable":true,"href":"https:\/\/sitemate.com\/au\/wp-json\/wp\/v2\/content_type?post=25375"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}