Recover holds the record of changes on live construction projects, so we treat it as confidential. This page answers the questions we are most often asked.
Where your information is held
- The database and files, including photographs, are stored in London, UK.
- The app runs on servers in London.
- The suppliers we use are listed on our supplier list.
Keeping companies separate
- Each company's information is kept separate by access rules in the database itself, so one company cannot see another's records even if the app had a fault.
- Within a company, its administrator decides who is invited and what each person can see. Accounts are by invitation only.
Protecting the record
- Every note and record is stamped with the date, time and the person who added it, and cannot be edited after it is saved.
- Once a compensation event is marked implemented, the database refuses any change to its records unless it is reopened.
- Your company can export its information at any time.
Encryption and passwords
- All traffic is encrypted in transit (HTTPS).
- Stored information is encrypted at rest by our database provider.
- Passwords are stored only as a one-way scrambled form that we cannot read.
Backups
- The database is backed up daily, and backups are kept for 7 days.
Our own access
- Only named people at Recover can reach the systems behind the service, and only to run and support it.
- Our admin accounts use two-factor sign-in.
- We do not look at a customer's records except to provide support it asks for, to keep the service secure, or where the law requires.
If something goes wrong
- We have a written breach plan. If a breach affects your company's information we will tell you without undue delay, and in any case within 48 hours of becoming aware of it.
- Where the law requires, we report breaches to the Information Commissioner's Office within 72 hours.
Planned
- An independent penetration test before paid launch.
- Cyber Essentials certification.
To report a security concern, or for a completed security questionnaire, email privacy@getrecover.co.uk.