Security
Security design overview for municipal field operations
TraverseOps is designed for municipal operations where asset records, inspection history, work orders, and evidence photos are intended to be limited to authorized users. This page describes design goals and current product direction, not a formal assurance report or compliance certification.
Authentication design
TraverseOps is designed for authenticated access so invited users sign in before viewing municipal workspace data. Account setup, password reset, SSO, and authentication options depend on the workspace configuration used for a pilot or production rollout.
Role-based access
Role-based access is intended to help municipalities separate responsibilities for viewers, field crews, editors, administrators, and owners. Exact permissions should be confirmed during setup so users have access appropriate to their work.
Private workspace architecture
Organization-specific workspaces are designed with the goal of separating one municipality's assets, users, evidence, inspections, work orders, and reports from other organizations. Final tenant isolation behavior should be reviewed as part of production setup and backend configuration.
Evidence storage
Evidence photos, field notes, and inspection records are intended to stay inside the relevant municipal workspace and be available to authorized users for operational review. Storage location, retention, and access rules should be confirmed for each deployment.
Auditability
Audit logging is designed to support operational review of changes to assets, inspections, work orders, imports, settings, and user activity. Exact retained events, visibility, and retention periods should be scoped for each deployment.
Backups
TraverseOps is designed with backup and recovery planning in mind for municipal asset and inspection data. Backup scope, frequency, retention, recovery process, and responsibility should be confirmed before production use.
Responsible disclosure
To report a suspected security issue, email support@traverseops.app with a clear description, affected page or workflow, reproduction steps, and screenshots if safe to share. Please avoid accessing, modifying, or sharing municipal data that does not belong to you.