Security

Security and company-data isolation.

Operations360 is designed so each rental company works in a protected company workspace, with access controlled by identity, role and operational responsibility.

Protection follows every operational action
  1. Company workspace
  2. Identity and role
  3. Protected data
  4. Audit evidence
Company isolationProtected workspacesIdentity + MFAControlled accessEncrypted dataAt rest and in transitAudit trailsOperational traceabilityMumbai AWS regionProduction residency35-day backupsAutomated retention

Protection across the operating system

Private company boundaries

Access checks are enforced by the service and data layers so authenticated users can work only within the company and operational scope they are authorised to use.

Identity and access

Authentication, optional multi-factor authentication and role-based permissions protect entry to the platform and sensitive operational actions.

Protected data and documents

Operational data is encrypted at rest. Documents are stored privately with versioning, and access is granted only through authorised product workflows.

Operational traceability

Important activity is recorded through application audit trails, infrastructure logging, monitoring and alerts to support investigation and accountability.

Resilience and recovery

The production foundation uses encrypted, private database infrastructure across multiple availability zones, with automated backups retained for 35 days and deletion protection enabled. Supporting queues and storage are encrypted and monitored.

Account control and support

Infrastructure and residency

Production infrastructure is operated in the AWS Mumbai region. Service dependencies and any approved subprocessors are reviewed before customer data is routed through them.

Permissions and audit logs

Role capabilities limit operational actions, while important changes and provider-delivery events retain an organisation-scoped audit trail.

Incident response

Monitoring and alerts support investigation and recovery. Customers can report a suspected incident privately to the security contact below.

Export, cancellation and deletion

Selected CSV exports are available today and consolidated self-service portability is in beta. Cancellation and deletion requests are handled through an authorised support process.

Have a security or privacy question?

Contact us privately and include only the information needed to understand your question. Do not send passwords or access codes.

Contact the security team