Security at BasinCheck
Your safety data is critical. We protect it with tenant isolation, access controls, private storage patterns, and operational processes built for regulated field records.
BasinCheck stores records that may include employee names, incident details, signatures, photos, corrective actions, OSHA logs, SDS/HazCom documents, and customer audit evidence. The platform is designed to support customer privacy obligations without treating compliance as a checkbox or a one-time claim.
Encryption
Application traffic is encrypted in transit. Database and file storage are hosted on managed cloud infrastructure with platform encryption and access controls.
Infrastructure
BasinCheck uses managed application and database infrastructure for hosting, authentication, storage, backups, and deployment isolation.
Access Control
Role-based access control ensures users only see data they're authorized to access.
Authentication
Secure account authentication, protected routes, and organization membership checks restrict access to customer workspaces.
Audit Logging
Key account and safety workflows preserve activity history for accountability, including team access changes and operational record updates where supported.
Data Isolation
Multi-tenant architecture with strict data isolation between organizations.
Privacy Operations
BasinCheck is built to help customers manage safety records as controlled business data, not scattered files. Privacy requests, retention decisions, and exports are handled with the customer organization because workplace safety records may also be subject to OSHA, Cal/OSHA, insurance, or contractual recordkeeping obligations.
Customer-Owned Records
Customer safety records remain customer data. BasinCheck does not sell customer employee data or share it for cross-context behavioral advertising.
Export And Offboarding
BasinCheck supports record exports today and is adding recurring operational export workflows for customer admins.
Retention-Aware Deletion
Deletion requests are reviewed against safety record retention duties so required records are preserved or archived when needed.
Compliance
Managed Infrastructure
BasinCheck relies on established infrastructure providers for hosting, database, authentication, storage, and email delivery. Customer security reviews can include the current subprocessor list and infrastructure posture.
OSHA And Cal/OSHA Record Support
BasinCheck helps customers organize audits, inspections, JSAs, incidents, OSHA logs, SDS/HazCom records, and related evidence for safety program administration.
CCPA/CPRA-Aligned Controls
BasinCheck supports customer data access, correction, export, retention, and deletion workflows. California workplace privacy requests are coordinated with the customer organization where employee safety records are involved.
Security Questions?
Contact our security team at security@basincheck.com