We use analytics cookies

To understand how you use our site and improve your experience. Only essential data.

Security, Privacy & Governance

Transparent, audit-ready infrastructure built for enterprise manufacturing. We don't hide behind vague claims. Here's exactly how we handle your data.

Data Residency & Hosting

  • U.S. data hosting available for operational data
  • Data residency options upon request for enterprise deployments
  • Audio processing: expires when ticket is closed; text records retained per your data policy
  • Encrypted transit and at-rest storage available on enterprise plans

Privacy & Data Processing

  • Data Processing Agreement (DPA) available on request
  • Privacy-by-design architecture: minimal data retention by default
  • Audio deleted upon ticket finalization unless explicitly configured otherwise
  • Structured text-only records retained for audit and searchability

Access & Controls

  • Configurable permissions for Owners, Admins, and Operators
  • Records are easy to export. API and custom integrations on eligible plans.
  • Audit logs capture all system access and record modifications
  • Export-ready logs for compliance reviews and internal audits

Compliance & Governance

  • Designed to support OSHA documentation workflows (not OSHA-certified; supports your compliance processes)
  • GDPR-aligned controls; supports CCPA-related data subject requests
  • Subprocessors list available upon request
  • Custom data handling workflows available per enterprise agreements

Frequently Asked Questions

Where is my data hosted?

U.S. data hosting is available for all operational data. Data residency and geographic options are configurable upon request for enterprise customers.

How long is audio retained?

Audio is processed and deleted when the associated ticket is finalized. Only structured text records are retained for searchability and audit purposes.

Do you support GDPR?

Yes. We've implemented GDPR-aligned controls including DPA support, data subject request workflows, and privacy-by-design principles. Full details available in our Data Processing Agreement.

Is there an audit log?

Yes. All system access, record modifications, and exports are logged with timestamps. Audit logs can be exported for compliance reviews.

Do you hold security certifications?

SOC 2 (framework in progress). We do not currently hold ISO certifications. For enterprise deployments requiring specific security certifications, please contact our sales team to discuss options.

How does SaidText work with our CMMS and EHS tools?

SaidText complements the CMMS and EHS tools you already use rather than replacing them. Records export, and an API is available on eligible plans.

Need More Details?

Request our full security documentation, DPA, or discuss custom compliance requirements.

Request Security Packet