Your data stays in Canada — and stays yours
What protects your estimates, invoices and client records, stated plainly and checked against the live system.
Stored in Canada
Your workspace database lives in Montréal (the ca-central-1 region). Estimates, invoices, client records and documents stay in Canada.
Each company walled off
Row-level security is switched on for every table in the database — all 40 of them as of September 12, 2026 — and each table has an access policy, so one company's records can't be read by another account.
Append-only audit log
Estimate approvals, invoice status changes, recorded payments, change-order decisions and team invitations are written to an audit log. Database policies stop signed-in users from editing or deleting those entries.
Encrypted, with daily backups
Data is encrypted in transit and at rest, with automated daily backups.
Account protection
Two-factor authentication with any authenticator app, passwords that need length, mixed case, a number and a symbol, and role-based access so crews and clients only see what they need.
Card details never touch us
Subscription payments run through Stripe's hosted checkout. Card numbers go to Stripe, not to BuildersBridge servers.
Signed webhooks
Outgoing events are signed with HMAC-SHA256 and only sent to https endpoints, so your systems can verify every request came from us.
Your data, exportable any day
Export your whole workspace as a ZIP of CSV files whenever you like — on every plan, with no fee and no retention call.
PIPEDA-aware handling
Personal information is handled with Canada's privacy law in mind. The details are in our privacy policy.
Database facts on this page were last checked against production on September 12, 2026.
No certificates we haven't earned
BuildersBridge does not currently hold SOC 2 or ISO 27001 certification. If your procurement process needs a security questionnaire completed, we'll answer it honestly — including the parts that aren't done yet.
Found a security issue? Email support@buildersbridge.ca.