Enterprise-Grade Construction Data Security
Your project data, protected at every layer.
AWS infrastructure, encryption in transit and at rest, daily encrypted backups, and deployment options that go all the way to your own servers.
Security built into every layer of the platform
Your estimates, contracts, cost data and site records are the commercial heart of your business, and Archdesk treats them that way. The platform runs on Amazon Web Services infrastructure with encryption in transit and at rest, daily encrypted backups, and a distributed architecture that keeps the service running even when individual components fail.
Robust system architecture
Built on a modern technology stack, applying best practices in software development, testing and code review before anything reaches production.
Secure cloud infrastructure
Hosted on Amazon Web Services infrastructure, providing high durability, high availability and a self-healing mechanism.
Encrypted in transit and at rest
The database is encrypted at rest, and all communication with the platform runs over TLS-encrypted connections.
Daily encrypted backups
The database is backed up daily, encrypted, and retained for 30 days, so your data can be restored if it is ever needed.
Service continuity by design
A distributed architecture with health checks, automatic node recovery, file replication and data integrity tests keeps the platform available when your projects depend on it.
The measures behind the headline
Day-to-day security is the sum of many smaller disciplines, applied continuously rather than once.
Anti-malware protection
Continuous anti-malware software operation on cloud infrastructure and data storage.
Constant code analysis
Regular code analysis and vulnerability reporting to identify and address potential security risks.
Secure container images
Container-based images built from scratch to minimize vulnerabilities and prevent malicious software.
AWS firewall protection
Protection against intrusions, hacking attacks, and infections through the AWS firewall.
Automatic server updates
Regular automatic updates of servers hosting application containers to patch vulnerabilities.
Vulnerability reporting
Continuous vulnerability reporting and updates against central vulnerability databases.
Authentication and authorization
Built-in authentication and object authorization management, with support for external SSO.
Granular security controls
Fine-grained permissions down to the field level, so people see exactly what their role requires.
Deployed the way your business requires
Three deployment types cover everything from a standard cloud setup to running Archdesk entirely on your own infrastructure.
Fully Managed Cloud
The standard deployment. We run the infrastructure, security and updates; your team just logs in.
Hybrid (Single Tenant)
A dedicated environment in the cloud region of your choice, with room for additional security measures and updates scheduled around your operations.
Enterprise (On-Premise)
Archdesk deployed on your own infrastructure, giving you maximum control over your data and security protocols.
Both the Hybrid and Enterprise options allow enhanced security measures and let you schedule updates according to your organization's needs.
Updates you can plan around
New versions are released in scheduled update windows announced in advance, so your team knows exactly when changes are landing and is never surprised mid-project. On Hybrid and Enterprise deployments, those windows are scheduled around your operations.
For more detail on any of our security measures, or to discuss the requirements of your own security review, contact us and we will walk you through it.
Trusted by construction companies of every size, worldwide
See your next project on Archdesk
Book a demo and walk through a fully worked example project: one platform running everything from winning the work to closing it out.
Book a Demo
