Security

How TourAmber Protects Visit Media And Site Evidence.

Encryption in transit and at rest, workspace isolation, retention controls, and audit logs for capture, issue creation, and handoff delivery.

  • TLS 1.3 for all media upload · AES-256 at rest for photos, video, and voice notes
  • Workspace-scoped storage — no cross-tenant visit capsules or media files
  • Configurable retention aligned to your plan · automatic purge jobs
  • RBAC for capture, observation review, issue workspace, and portfolio surfaces
  • SSO / SCIM on Network plans · named admin audit for portfolio exports
  • SOC 2 Type II in progress · DPA and SCCs available on request

Data Processing Addendum · Contact security