Security
Your data, your rules, and the proof
What we do to keep your data safe, and only what is true today.
How we protect it
Each organisation walled off
Every organisation’s records are kept apart by the database itself, on every table, and every read and change is checked against the person’s permissions.
A record of every change
Every change is written to an audit trail that is chained, so a removed or altered entry is found when the trail is checked.
Two-step sign-in
Sign-in can ask for a one-time code from an authenticator app as well as the password.
We only look when you let us
Our support staff can look inside an organisation’s records only when its owner allows it, read-only, for a set time, and every look is in its own audit trail.
Athena works under your rules
Athena sees only your own organisation’s records, under the same permissions as a person, and the things that must stay human (issuing permits, signing isolations, closing incidents, approving payments) have no way through for it.
Your data is yours
You can take everything out, free, whenever you want.
Card payments
Card details never touch our servers: Stripe takes them.
What we hold ourselves
No certificates of our own yet. We do not hold Cyber Essentials yet: we are working towards it, and its card appears here, with its date and its scope, the day we hold it.
Where your data lives
Predict & Maintain is not open to customers yet. From the day it opens, your records are kept in a database in London, United Kingdom (Amazon Web Services, eu-west-2). The companies that help us run the service, what each one holds and where, are on the sub-processors page.
The hosting companies’ own certificates cover their data centres, not us. Our own controls are the ones on this page.
Is it working?
The status page runs apart from the app, checks each part every minute from outside our own hosting, and shows the uptime it measured over the last 90 days. It shows no figure for a part until that part is open and measured.
Help when you need it
Ask us from Help in the app. Each case gets a severity and the time a person answers by, set out on the service levels page; how fast we actually answered is counted on the status page. If a safety function stops working, the urgent door in the app goes straight to the person on call.
Found a weakness?
Tell us at security@predictandmaintain.com. We reply within two working days. How to report it.
See it on your own sites.
Free for one site, up to 3 people and 2,000 assets. No card.