ENTERPRISE TRUST
Security & data
Current product controls for project evidence, external access and AI-assisted drafting. This page deliberately avoids claiming certifications SnagSort does not presently hold.
Private project evidence
Project photographs are stored in private storage. External access is supplied through scoped application permissions and time-limited signed photo URLs rather than a public media bucket.
Scoped external access
Main contractors and subcontractors receive individual, revocable project guest access. Server-side authorisation restricts the records returned to their permitted project/party scope.
Mandatory legal gate
External users must accept the current External User Terms and acknowledge the Privacy Notice before the contractor API releases project records or signed photo links. Acceptance is audit-recorded.
Close-out control
External users can submit evidence and responses but do not gain contractual authority to certify or close the client’s record merely by marking work complete.
Revocation
External guest access is re-checked against the live guest record. Revoking a contractor can also remove delegated supply-chain access.
AI use
AI drafting is optional. SnagSort does not intentionally opt customer project content into third-party model-training/data-sharing programmes without explicit written customer authorisation.
Enterprise due diligence
Procurement and information-security teams can request current architecture, subprocessor, data-location, retention, access-control and incident-response information through the enterprise enquiry route. See also the Data Processing Addendum.