Your records, kept apart and kept honest.
How the records are stored, who can see them, how they're backed up, and what we don't claim yet. Plain answers for a yard's IT team, a plant's contracts office or a public owner.
Sheet 02Where it lives
On infrastructure you've heard of, in the United States.
| Records | A Postgres database on Supabase, hosted on AWS in the United States. |
| Photos | Cloudflare R2, reached only through signed links that expire. |
| Off-site copy | Backblaze B2, written weekly. |
| The app itself | Served from Vercel; it holds no customer records. |
| In transit, at rest | All traffic over HTTPS. The storage providers encrypt data at rest. |
Sheet 03Who can see it
- Each company sees only its own records. The separation is enforced by the database's row-level rules on every business table, not by the screens.
- Seven roles, from field inspector to read-only reviewer, with access set per site where the role calls for it.
- Two sides of one job, yard QC and owner's rep, each keep their own records.
- Support sees nothing unless you let it. Your administrator opens support access, read-only, for 24 hours, and it shows in your Activity trail.
- Sign-in is by email and password; passwords are stored only as hashes. Single sign-on and multi-factor sign-in aren't offered today.
- See who's using it: active, idle and never-signed-in badges on every user.
Sheet 04Audit trail
A record that answers for itself.
Coating records get read years later, in a warranty claim or a dispute. They should say who did what, and when, without anyone's say-so.
- Acceptance is stamped by the server: who ruled and when can't be typed in.
- Issued reports are frozen. Once made permanent, nobody can swap the PDF behind them.
- Workpacks change only by revision; the issued one stays as issued.
- Activity trail of who created and edited inspections, and a history of every change to a person's account.
- A device's clock is disclosed, not trusted: an impossible time is shown for what it is.
Sheet 05Backups
Copies in two places, and a drill that restores one.
- Weekly database backup and a weekly off-site mirror to a second provider.
- Off-site copies are locked for 90 days once written, against deletion by anyone.
- A weekly automated drill restores the database backup to prove it can be read.
- Recently deleted: a removed survey item or inspection can be seen and restored.
- Export any time: the register as CSV, or the job's records as a ZIP of spreadsheets.
Sheet 06AI
AI only when someone asks for it.
- Nothing is sent on a schedule. A photo or text goes to the AI provider (Anthropic) only when a user asks for a caption, a hold-point opinion, a label read, a spec parse, a daily summary or a Help answer.
- A person decides. AI never stamps a gate or signs anything.
- It can be switched off for an account.
Sheet 07Public sector
For public owners and agencies.
We'd rather tell you what's true today than what we hope to have.
| Company | Blackstone Lane LLC, a US company. |
| NAICS | 541511 Custom Computer Programming Services (primary) · 541330 Engineering Services · 541690 Other Scientific and Technical Consulting Services. |
| Hosting | Records in the United States. |
| Certifications | None claimed today. SOC 2, ISO 27001 or a government authorization will be listed here once held. |
| Accessibility | A formal accessibility conformance report (VPAT) is not yet published. |
| Questions | rfinsel@blackstonelanellc.com · (706) 925-7007 |