Skip to content
Security & data

Built for shops that run their whole business on it.

Your customers, your jobs, your pricing, your money — it all lives in SightLine. Here is exactly how we keep it isolated, encrypted, backed up, and yours to take with you.

Tenant isolation in the data layer · encrypted at rest and in transit
What protects your data

The controls actually in place.

Sealed to your shop

A tenant-isolation guard keeps every shop’s data separate — enforced in the data layer itself, not just hidden in the interface.

HA database cluster

The database runs clustered across two hosts, so a lost machine is not lost service.

Replicated and snapshotted

The database disk replicates every 15 minutes, plus a full daily snapshot.

Complete export, every plan

Download the whole record as CSV or JSON, any time — never gated behind a pricing tier.

Least-privilege roles

Estimator, installer, and office roles see only the surfaces they need. Every plan includes unlimited seats, so access is scoped by role, not rationed by seat count.

In transit and at rest

Your data is encrypted over the wire and encrypted on disk.

United States, one region

Production runs on infrastructure we operate in the US. We do not offer customer-choosable multi-region residency, and we will not pretend to.

Never sold, never shared

We do not sell your data, share it with third parties, or use it to train models.

The controls

Where things stand, in numbers.

Data layer
Tenant isolation
2 hosts
HA database cluster
15 min
Replication interval
Every plan
Data export
Unlimited
Seats per shop
TLS + at rest
Encryption
United States
Data location
Never
Data sale or sharing

Questions we get

Are you SOC 2 or ISO 27001 certified? What about HIPAA or a penetration test?

No — not yet. We are a new product and we won’t claim a certification we don’t hold. The controls on this page — tenant isolation in the data layer, encryption at rest and in transit, daily backups with continuous replication, and export on request — are genuinely in place today. When we complete a formal audit or third-party pen test, it will appear here, dated, with the evidence.

Can customers pay by credit card?

Card payments run through Stripe and are currently in private beta as we roll them out. If you don’t see the option yet on your account, ask us to enable it.

How do customers sign proposals and approvals?

Through a dedicated e-signature provider over a secure, tokenized link. Customers never hold a SightLine account or password — there is no customer login surface to breach.

Where is my data stored, and can I choose a region?

On infrastructure we operate in the United States. Production is a single region today — we don’t offer customer-choosable multi-region residency, and we won’t claim to until it’s real.

Do you sell or share my data, or use it to train AI models?

No. Your data is not sold, not shared with third parties, and not used to train models.

What happens to my data if I cancel?

It stays yours for as long as you use SightLine. Export the complete record as CSV or JSON any time, and ask us to delete it — we will.

How do I report a security issue?

Contact us and flag it as a security report. Give us reasonable time to fix it, don’t access or modify data that isn’t yours, and don’t run tests that degrade the service — we’ll acknowledge it and keep you updated through the fix.

Need more than a page for procurement?

We’ll get on a call with your IT or procurement contact and walk through the controls directly.

Contact us
& data Security & data — FilmOptix · FilmOptix