Security at AlignedGC

Last updated: October 13, 2026

Separate company information

Each company’s information is isolated from every other company’s. This separation is enforced at the database level. Access is controlled by role and checked on the server. Authorised platform administrators may access information to operate or support the service.

Encryption and private files

Information is encrypted in transit and at rest. Files are stored privately. There are no permanent public file links. Authorised access may use temporary links that expire.

Record history

Changes to protected records are logged with who made them, when they were recorded and the changed values. Required correction and void reasons are kept in that history. Protected safety, attendance and payroll records cannot be erased during retention. They can be corrected or voided, while their history is kept.

Signatures and dates

Safety document acknowledgements are checked and timestamped on the server. Supervisor sign-off and record-history timestamps are also set on the server. Offline attendance keeps the time captured on the site device, alongside the server’s record of when it was received.

Site device links

Site device links are single-purpose and can be revoked at any time. A board link displays selected site information but cannot create records. A photo capture link cannot be used as a board link.

Retention and yearly archives

Companies set a retention schedule, with seven years as the default. Records can be exported as a yearly archive for the company to keep itself. Reaching the end of the schedule does not automatically erase records. Companies may request workspace deletion after the retention period.

Hosting region

Our database is hosted in Northern Virginia, United States (US East). Information held there is stored outside Canada.

Security certification

AlignedGC is not certified under ISO 27001, SOC 2, or any other security certification scheme, and we do not claim to be. The practices described above are how the platform is built. Companies with specific security requirements can contact us for more detail.

Contact

Companies with security questions can use the in-app contact form.