Security & compliance
You're trusting BeVigil with guard location data and identity verification photos. Here's exactly how that data is protected.
How your data is protected
Encryption everywhere
Every connection to BeVigil — the web dashboard, the mobile app, and every API call between them — runs over encrypted HTTPS/TLS. Data at rest in the database is encrypted by default. There is no unencrypted path your data travels.
Row-level access control
Every table in the database enforces row-level security policies, not just application-layer checks. A guard's session can only ever read or write the rows their role and organisation permit — enforced by the database itself, not something that can be bypassed by a bug in the app layer.
Two-factor authentication
Two-factor sign-in with an authenticator app is available to owners, admins and managers, with backup codes for a lost phone. Once someone turns it on, the database itself refuses their password-only sessions, on the web dashboard and in the mobile app alike. A company can also require it for every manager.
Location data, tightly scoped
Guard location is only collected while a guard is clocked in on shift, and only with explicit consent granted in the mobile app. It's retained for 48 hours, then automatically deleted. Only managers within the same organisation can see it — never another guard, never another company.
Verified licence submissions
Every licence is recorded with its number, class and expiry. In Queensland, New South Wales and the ACT the number is checked against the official government register, so photos are optional; in other states the app asks for live camera photos of the licence and a selfie, never images from the photo library. Licence photos are deleted as soon as a manager approves or rejects the licence, and every submission stays pending until a manager reviews it.
Multi-tenant isolation
Every organisation's data is isolated from every other organisation's at the database level. There's no shared pool of guards, sites, or shifts — your roster, your incidents, and your reports are only ever visible inside your own organisation.
Sensible retention limits
Account data is retained for the life of your subscription, then deleted 90 days after cancellation (60 days after a trial that ends without a subscription), with two email reminders and a full export offered first. Location pings are deleted after 48 hours automatically — we don't build up a long-term location history on anyone. You can request deletion of your data at any time.
Infrastructure providers
We use a small number of well-established providers, each bound by a data processing agreement.
Supabase
Database hosting
Vercel
Web hosting
Stripe
Payment processing
Resend
Email delivery
Expo
Mobile push notifications
For the full legal detail, see our Privacy Policy and Terms of Service.
Security your operation can rely on.
Your guard data and incident records are protected the same way from your first shift. See it yourself, free for 30 days.
Try it free for 30 days. Cancel anytime, no lock-in contract.Questions? Email us at hello@bevigil.com.au