Security and data

Where your company's data lives, who can see it, what happens on the laptop, and what you get when you leave. Written for the IT department that will ask.

In one paragraph

Your company's data lives in a database hosted in the EU, is visible only to your company's users, and is copied to each user's laptop so the app works without a connection. STYYR staff do not have routine access to it. Signed-off reports cannot be edited. When you leave, you get your data and we delete ours.

Where the data is

What Where Provider
Database (reports, projects, vessels, customers, hours, users) Stockholm, Sweden (AWS eu-north-1) Supabase
Files (photos, attachments, company logo) Same region, object storage Supabase Storage
Synchronisation service between the database and the laptops EU region, PowerSync Cloud JourneyApps
Sign-in and invitations Same Supabase project Supabase Auth
App downloads and updates Public release feed; carries no customer data GitHub

All traffic between the app and these services is encrypted in transit (TLS). Data at rest is encrypted by the hosting provider.

Who can see what

  • Your company only. Every record carries your company's identifier, and the database enforces on every read and write that a user sees only their own company's rows. This is a database rule, not an app setting; it holds for any client.
  • Three roles inside the company. A leader manages the company, its settings, rate rules and people. A coordinator runs projects and teams. An employee writes reports and logs hours. Which role may do what is enforced in the database as well as in the app.
  • Employee pay rates are not shown to customers. The report and every customer-facing document use the billable rate rules only. The employee rate world exists for the company's own hour panels.
  • STYYR staff. No STYYR employee has a login to your company. The administrative key to the database is held by one person at STYYR and is used for operating the service (migrations, incident response), not for reading customer data. Feedback you send from the app's feedback button, including any screenshot you attach, goes to STYYR and is read by us.

On the laptop

  • The app keeps a full copy of your company's data on each user's laptop, in the user's own Windows profile, so it works offline. The database copy is not separately encrypted; we recommend BitLocker or an equivalent full-disk encryption on company laptops.
  • A visible data folder, Documents\STYYR Automation\<Company>\, holds a daily JSON snapshot of the company's data and a mirror of the files the user has seen. The folder can be moved; a synced folder (OneDrive, Dropbox) is fine for it.
  • The sign-in session is stored encrypted with Windows' own credential protection. Closing the app does not sign you out. Signing out clears the session and the local database copy; the next sign-in downloads it again. The data folder with snapshots and mirrored files stays.
  • The application log contains the app's own events and errors, no customer data.

Integrity of reports

  • A report marked finished is locked in the database: it cannot be edited by any client, including ours. A correction is a new revision, which keeps the original.
  • Every report carries a reference number that is fixed when the report is created, so a later rename of the vessel or the customer never changes the name of a document the customer already has.
  • Deletion is permanent and explicit, and cleans up the files as well as the records.

Backups and recovery

  • The database is backed up daily by the hosting provider, with seven days of backups kept.
  • Each laptop's daily snapshot is an additional copy in your own hands.
  • Because every laptop holds a full copy, the loss of one machine loses nothing: sign in on another and the data is there.

Leaving

  • On termination you receive an export of your company's data (JSON, plus the files) on request.
  • Your data is deleted from the database and file storage within 30 days of termination, and we confirm the deletion in writing.
  • An individual employee can be removed at any time; their name stays on the reports and hours they wrote, since those are the company's records.

Legal

  • STYYR is the data processor; your company is the data controller for its employees' names and hours and for the customer representatives' names and signatures on reports.
  • A data-processing agreement is part of the subscription terms. The sub-processors are the providers listed above.
  • No data is used for anything other than providing the service. No analytics, advertising or model training.

Known limitations, stated plainly

  • The installer is not yet code-signed, so Windows SmartScreen shows a warning on first install. The download page explains it and publishes the file's checksum so IT can verify the download.
  • Customer signatures are collected on paper for now: the finished report is printed and signed with a pen. Digital signing arrives with the phone app.
  • There is no customer portal by design. The signed report is delivered by email, so the email is the record.

Questions: the support address in the app's account menu, or the contact on the website.