Security and data
Your project records are business records. Data is hosted in the EU, every record is kept separate from every other company’s, files sit in private buckets, and the AI assistant never writes without a person confirming. This page is the plain-language version of how that works; the privacy policy is the legal one.
- [01]
6roles
Six roles and per-member permission flags control screens, actions and whether money is visible.
- [02]
0failures
The cross-company test suite, run as each of the six roles, last passed in full in July 2026.
- [03]
7days
Daily encrypted database backups are kept for a week, in the same EU region.
- [04]
30days
Deleted data rolls off backups within thirty days.
Where and who
Separation is enforced by the database itself rather than by the screens, so a hidden button is never the only thing in the way.
- Hosting
- Your records, files and sign-in are hosted in the EU, in Ireland, and the web app runs in Dublin. Every provider we use, and where it runs, is listed on the subprocessors page.
- Isolation
- Every company’s data is kept separate from every other company’s, enforced by the database itself rather than by the screens, and every change is checked against the person’s role. An automated test suite tries to cross between companies as each of the six roles; it last passed in full, with no failures, in July 2026.
- Files
- Documents, original drawings, photos and message attachments are stored privately, and every download is checked against the person’s access. The drawing images the viewer shows are served from addresses that can’t be guessed, so drawings open fast and, in the phone apps, work offline; we walk through that trade-off with any customer who asks.
- Transport
- HTTPS everywhere. On Android, App Links for getkonverge.com are verified against the app’s signing certificate.
- Backups
- Encrypted backups of the database are taken daily by our database host in the same EU region and kept for 7 days. Deleted data rolls off backups within 30 days.
- Sign-in
- A one-time code by text or by email, so there are no passwords to leak. In the iPhone and Android apps (coming soon), a biometric or PIN app lock re-arms every time you return to the app, separately from the session, so re-entry never costs a code.
- Web app
- Every page sends a strict Content-Security-Policy (scripts run only with a one-time key per page), refuses to be framed by other sites, and is served over HTTPS only. Workspace pages are never indexed by search engines.
- On device
- Local caches and queued records are stored in encrypted key-value storage whose key is generated per install and held in the iOS Keychain or the Android Keystore. It is never bundled with the app.
- Permissions
- Six roles and per-member permission flags control screens, actions and, separately, whether money is visible. Permission changes reach phones in real time.
- Audit
- Changes to members, roles, invites and billing, document changes, workflow steps and every confirmed AI action are written to audit logs that belong to the company.
AI
Called from our servers, never from inside the app, and never writing on its own.
The assistant runs on Google’s AI models, called from our servers, never from inside the app. When a person uses it, the text, photo or voice clip they submit plus the project records needed to answer are sent to Google under API terms that do not use the content to train models.
The assistant never writes on its own. It proposes drafts; a person confirms; the change is checked against their permissions and recorded in the audit log, exactly as if they had made it by hand. Destructive actions need a red, single-item confirmation. Company and account deletion are excluded from the assistant entirely.
Each person is asked for consent in the app before the first use. AI use has a monthly limit per company.
Subprocessors
14 providers| Provider | Purpose | Location |
|---|---|---|
| Supabase (on AWS) | Database, authentication, file storage, serverless functions, including website enquiries and support tickets with their attachments | EU (Ireland, eu-west-1) |
| Google (Gemini API) | AI assistant (text, vision and voice) and automatic text extraction from uploaded documents and drawings | Google Cloud (global) |
| Twilio | SMS sign-in codes, and text messages to people who don't use the app (only when switched on) | US/EU |
| Resend | Email: sign-in codes and links, invitations, trial and billing notices, documents a user chooses to email, support replies and satisfaction surveys, website enquiry notifications to our team, and receiving email for our support system (reply.getkonverge.com, including mail forwarded from support@getkonverge.com) | US/EU |
| Zoho (Zoho Mail) | Our team's mailboxes on getkonverge.com, including support@getkonverge.com: email you send us arrives here first | EU |
| Stripe | Card payments and subscriptions for plans bought on the web. Card details go to Stripe, never to Konverge | US/EU |
| RevenueCat | Subscription status for plans bought in the App Store or Google Play (an account reference and the store receipt; no name, email or card) | US |
| PostHog | Product analytics for the web and phone apps: which screens and features are used, by user and company ID. No names, emails, phone numbers or record contents; IP addresses discarded | EU |
| Google Firebase | Push notifications (FCM) and app analytics (screen views, feature usage) | Global |
| OpenStreetMap / Nominatim | Reverse geocoding: turning photo coordinates into a place name (proxied; only coordinates are sent) | EU |
| Sentry | Error and performance reporting for the phone apps and the web app | US/EU |
| Railway | Drawing processing, PDF and drawing-export workers | US/EU |
| Vercel | Hosting the Konverge web app (app.getkonverge.com) | EU (Dublin) and a global edge network |
| Amazon Web Services | Serving this website (getkonverge.com) | UK (London, eu-west-2) |
Transfers outside the UK/EEA rely on the UK International Data Transfer Addendum / EU Standard Contractual Clauses or an adequacy decision. The subprocessors page also lists the services used only when a feature is switched on, and how to hear about changes. Full detail in the privacy policy.
Leaving
Deletion, export and leaving
- Your account
- Delete it from Settings → Account, or by email if you cannot reach the app. Live data goes immediately; backups roll off within 30 days; crash diagnostics within 90.
- Your company
- People with the Export permission can download everything from Settings, Export data, in the web app: a spreadsheet (CSV) for every register and the document files, in one ZIP. It works even when a workspace is read-only. Business records created by a member who leaves stay with the company as its statutory record.
- Reporting
- Report a message, photo, document, AI response or user from where you see it; owners review reports in a moderation inbox and can block users per company.
Limits
What we don’t claim
We hold no security certifications and publish no uptime guarantee. We don’t run a public status page yet: incidents are communicated by an in-app banner and by email to workspace owners. Changes to the live system are versioned and reviewed before they ship. We would rather say that plainly than imply otherwise.
Single sign-on (SAML) is available on request for Enterprise customers; it isn’t self-serve.
- No ISO 27001 or SOC 2 certification
- No uptime guarantee or SLA
- No paid bug bounty
Vulnerability disclosure
Our disclosure policy, also published in machine-readable form at /.well-known/security.txt. Last reviewed 8 October 2026.
Email support@getkonverge.com with “Security report” in the subject. Please include:
- what you found and where (the page, screen or API address),
- the steps to reproduce it, and what an attacker could do with it,
- how to reach you with questions.
What we do. We acknowledge your report by the next business day (UK time), keep you updated while we fix it, and tell you when it’s fixed. If you’d like credit, we’ll give it once it’s fixed. We don’t run a paid bug bounty.
Please don’t access, change or delete data that isn’t yours (use your own test company), run denial-of-service or load tests, send spam, try social engineering or phishing against our staff or customers, or test physical security. Stop and tell us as soon as you’ve shown a problem exists.
If you follow these rules and act in good faith, we won’t pursue or support legal action against you for your research.
Seen a phishing email pretending to be Konverge? Send it to the same address.
Questions
01Is Konverge ISO 27001 or SOC 2 certified?
No. Konverge holds no certifications. This page describes the controls in place; it does not claim a certification we do not have. We keep an internal controls document mapped to the SOC 2 criteria and can walk you through it on request.
02Can Konverge staff read our project data?
Support access is by request and is logged. Automated processing (preparing drawings for viewing, search indexing, AI requests) runs on our servers under your company’s permissions.
03Is our data sent to an AI provider?
When a person uses the assistant, the message, photo or voice clip they submit plus the project records needed to answer are sent to our AI provider, Google. Uploaded documents and drawings are also read automatically so they can be searched. Google processes both under API terms that do not train on your content. People are asked for consent before first using the assistant, and AI use has a monthly limit per company.
04Where are backups kept?
Encrypted backups of the database are taken daily by our database host in the same EU region and kept for 7 days. Deleted data rolls off backups within 30 days.
05Do you offer single sign-on (SAML)?
On request, for Enterprise customers. It isn’t available self-serve. Email us to talk it through.
06Will you sign a data processing agreement?
Yes, on request, on the Company and Enterprise plans and for pilots that need one. The subprocessor list is the schedule it references.
14-day free trial with your card at sign-up: cancel before day 15 and you pay nothing. Bring a live job, your drawings and your team, and see it on site the same day.