Security

Isolation by construction

What Membership Review learns about your members' vehicles from your confirmed visits is your data and stays inside your tenant. Each customer (tenant) gets its own process, its own database, its own storage prefix and its own encryption key. No process can open two tenants' data, so there is no query that could touch two tenants. There is no shared vehicle or plate index, no shared cache and no cross-customer analytics.

No face geometry, ever

Membership Review identifies vehicles only and never recognizes people or faces. It never creates, stores or compares face templates or any other biometric identifier.

Encryption and sign-in

• Encryption in transit (TLS) and at rest, with a separate key for each tenant.
• Multi-factor sign-in: an authenticator app (TOTP) is required for account owners and for all of our staff.

No standing staff access

Our staff have no standing access to your data. Support access happens only through a time-boxed grant that the account owner approves, only for that purpose and only for that time. Every access is logged with who, when and what, and the owner can see that log at any time.

Backups, export and deletion

• Nightly backups, with restore drills to prove they work.
• Export everything at any time, in open formats (CSV or JSON for records, original images with a manifest). Export is never charged for.
• When data is deleted, it is gone from every backup within 35 days.

Independent testing

An external penetration test is planned before paid launch.