Security

How Groundwork protects your data.

Groundwork stores your operational core — pipeline, client records, financials, and photos of every property you've serviced. We treat that responsibility seriously.

Encryption
AES-256 at rest. TLS 1.3 in transit. Every request, every backup.
SOC 2 Type II
Annual audit against SOC 2 Type II controls. Report available under NDA.
SSO & MFA
SAML SSO (Okta, Google, Microsoft). Enforced MFA at company or role level.
Data residency
US-region hosting. EU residency available for enterprise plans.
Audit log
Immutable log of every change. Exportable. Retained per your policy.
Backups
Point-in-time restore with 30-day rolling window. Disaster recovery tested quarterly.
Least-privilege access
Screen-level permissions and IP restrictions. Employees cannot view your data without explicit break-glass access.
Vendor security
Sub-processors audited. Full list published and updated as needed.
Report a vulnerability
security@groundwork-crm.com · PGP available.
Need our security package?

SOC 2 report, DPA, sub-processor list, and pen-test summary available under NDA to prospective customers.

Request security package