Skip to content

Security that holds up in procurement.

How PavePal handles, protects, and returns your network data. The short version: your data stays yours, in your region, under your control.

How your data is handled.

Your data stays yours

Imagery, detections, and condition records produced for your network belong to your organization. We use what you share to deliver the engagement, nothing else.

Your region, your residency

PavePal is cloud-hosted, and data-sovereignty arrangements are agreed during onboarding. Where your data lives is a decision you make, not a default you inherit.

Access is controlled and accountable

Access to your network data is restricted to the people delivering your engagement, with controls agreed up front so you always know who can see what.

Encrypted in transit and at rest

Your imagery and condition records are encrypted in transit with TLS and encrypted at rest. The data you share is protected on the wire and in storage, not just behind a login.

Security & trust

Security built for public infrastructure.

Your data, your region, your control.

  • ActiveData residencyHosted in your region, agreed per engagement
  • ActiveEncryptionIn transit (TLS) and at rest
  • ActiveRole-based accessRestricted to your engagement team
  • ActiveData ownershipYours; returned or deleted on request
  • In progressSOC 2Security readiness underway

Bring us your security questionnaire.

Procurement diligence is part of working with public infrastructure, and we treat it as a feature of the engagement, not friction. Ask us about:

  • Security questionnaires and procurement due-diligence requests
  • Data-processing agreements and retention terms
  • Data-flow walkthroughs: what is collected, where it goes, who touches it
  • Residency and sovereignty arrangements for your region