Security & privacy
Security controls built into every workspace
Site Safety UAE handles sensitive HSE evidence — permits, incidents, training records, and audit data. These are the platform controls enabled by default on every account.
Encrypted in transit & at rest
All traffic served over HTTPS. Data stored on managed Postgres with provider-managed encryption at rest.
Row-level access control
Every record is scoped to your organisation and site. Row-level security policies enforce access on the database, not just the UI.
Role-based permissions
Admin, manager, supervisor, and viewer roles. Roles are stored separately from user profiles and checked on the server.
Audit trail
Document versions, permit signatures, acknowledgements, and key actions are recorded with user, timestamp, and context.
Private document storage
Uploaded documents and photos live in private buckets. Access is granted via short-lived signed URLs — no public links.
Company-email access
Workspaces can be restricted to your company email domain. Invites and password resets go through verified email flows.
Shared responsibility
Site Safety UAE provides the platform controls listed above. Your organisation remains responsible for assigning roles correctly, off-boarding leavers, and managing the content uploaded to your workspace. We do not certify your HSE management system — we give your team the tools to evidence it.
This page describes capabilities enabled in the product. It is not an independent certification. For a copy of our data handling overview, contact the team below.
Security contact
info@sitesafetyuae.comReport a suspected vulnerability or request a data handling overview.