Trust & Security

Where Your Data Lives

All Customer Content is stored in the United States. Our application runs on Google Cloud Platform in the us-east4 region (Northern Virginia). Our database (Firestore) is located in a US Google Cloud region. We do not transfer Customer Content outside the United States.

Encryption

• In transit: all connections to ROWSEngine use TLS 1.2 or higher.
• At rest: all data is encrypted at rest using Google Cloud's default encryption (AES-256).

Access Controls

• Document downloads are server-mediated. The application enforces per-user, per-project, per-document permissions before any file is released.
• Direct client access to file storage is disabled at the storage rules level.
• All sensitive actions are logged to a tamper-evident audit chain (SHA-256 hash chain, per-tenant).
• Account lockout protects against brute-force login attempts.
• Public landowner portals are rate-limited. We are adding additional abuse protections in upcoming releases.

Backups and Disaster Recovery

• We perform automated nightly backups of all customer data.
• Recovery Point Objective (RPO): up to 24 hours.
• Recovery Time Objective (RTO): we target restoration within 1 business day for most incidents. Larger incidents may take longer.
• We are evaluating Firestore Point-in-Time Recovery to reduce RPO further. We will update this page when it is enabled.

Your Data, Your Control

• You can export your project data at any time during an active subscription, free of charge.
• You retain ownership of all Customer Content. See our Terms of Service for details.
• We do not use your data to train any AI or machine learning model. See our Privacy Policy.

Subprocessors

We use a small number of vetted third-party service providers. See our full subprocessor list.

Custom and Specialized Engagements

ROWSEngine can be tailored for specialized right-of-way work — custom workflows, integrations, build-to-suit features, white-glove onboarding, or contracting structures that go beyond our standard plans. If you have specialized needs, contact support@rowengine.com to discuss scoping and contracting.

Reporting a Security Issue

If you believe you've found a security vulnerability in ROWSEngine, please report it to security@rowengine.com. We appreciate responsible disclosure and will respond within two business days.

Questions

General security questions: security@rowengine.com

Billing or account questions: support@rowengine.com