Security & trust
Security is part of the architecture, not a bolt-on
HVAC warranty and supply-chain data is sensitive, and the industry is audit-heavy. HVACR Passport was built that way from the start — least-privilege access, strict tenant isolation, encryption, and a complete audit trail. Here's exactly how your data is protected.
Access & authentication
Only the right people, seeing only the right data
Authenticated by default
Every request requires authentication. Short-lived JWT access tokens rotate automatically and are blacklisted on rotation; web sessions live in encrypted, HTTP-only cookies — never local storage.
Least-privilege access
Ten roles and twelve permission policies on a default-deny model. Each person sees only what their role needs — homeowner data and supply-chain data stay walled off from each other.
Brute-force protection
Rate limiting across the API, with strict limits on authentication endpoints to blunt credential stuffing and password guessing.
Data protection
Protected in transit, at the edge, and at rest in a private network
Strict tenant isolation
Every record is scoped to a manufacturer and filtered at the data layer. No application role can see across manufacturers — cross-tenant access exists only for the platform operator.
Encrypted in transit
TLS 1.3 across every endpoint, HSTS preloaded, secure cookies, and hardened HTTP security headers everywhere.
Private database
The database runs on internal networking and is never exposed to the public internet — it's reachable only by the application.
Protected at the edge
Cloudflare sits in front of every service for TLS termination, web-application-firewall filtering, and DDoS mitigation.
Integrity & auditability
A record you can trust — and prove
Immutable audit trail
Every state change is logged with the actor, timestamp, and IP — and the trail can't be edited or deleted. A complete forensic record for warranty disputes, recalls, and audits.
Enforced data integrity
Units move through a strict, server-side state machine that rejects invalid transitions — so a unit's history can't be quietly falsified.
Injection-resistant
Database access goes through a parameterized ORM with no raw SQL, and inputs are validated at every boundary.
Defense in depth
If something does go wrong, the blast radius is small
No platform can promise nothing will ever happen. What matters is how much damage a single failure can do — and here, the answer is: very little.
- A compromised account is confined to one tenant and one role — it can't roam across manufacturers or reach data it was never granted.
- Short-lived access tokens expire quickly and can be revoked immediately through blacklisting.
- The immutable audit trail means unusual activity is recorded and traceable after the fact.
- Secrets live in the environment, never in the codebase, and the database can't be reached from the public internet.
Posture & compliance
Built to the standard your team would ask for
The foundation a serious compliance program needs is already here.
Reviewed against the OWASP Top 10
The application has been reviewed against the OWASP Top 10 — the standard catalog of web-application security risks.
SOC 2-aligned architecture
The technical controls a SOC 2 program expects — access control, audit logging, encryption — are already in place. Formal certification slots in under an acquirer's existing compliance program with no architectural rework.
Cloud-portable & containerized
Fully containerized and deployable to AWS, GCP, or Azure — so it runs inside your existing infrastructure and controls, not a black box.
Request a demo
Have a security or due-diligence question?
We're happy to walk through the architecture, access model, and audit trail in detail — send us the questions your team needs answered.