Security
Your Data. Your Rules. Full Stop.
Clearwell holds inspection records, asset histories, and compliance documentation for critical infrastructure. We treat that responsibility as a design constraint, not a checkbox.
SOC 2 Type 2: audit in progress
Clearwell has started its SOC 2 Type 2 examination. A Type 2 report covers how controls operate over a monitoring period, not a point-in-time snapshot. That period is running now, and we expect the report in Q2 2027.
Once issued, the report will be available to customers and prospects under NDA. Until then, we're happy to walk your security team through our architecture and controls directly.
Where we stand
- SOC 2 Type 2 (audit in progress, report expected 2027)
- CCPA-ready
- GDPR-aligned
- NIST Cybersecurity Framework (aligned)
- Penetration testing (planned)
Hollow markers are in progress or planned, not held. We'd rather show you the honest state than a wall of green checkmarks.
What's built
- Single sign-on (SSO)
- Role-based access controls (RBAC)
- Encryption in transit and at rest
- Complete audit logging
- API rate limiting
- Data export on request
- Data deletion on request
- No third-party data sharing, ever
Data ownership commitments
Your asset data is yours. We will never use it to train models without explicit permission. We will never sell it. We will never hold it hostage.
You can export your data at any time and request deletion at any time. There is no third-party data sharing.
Security questions
Working through a vendor security review? Send questionnaires, architecture questions, or suspected vulnerabilities to the team and you'll hear back within one business day.
[email protected]An Inspection Without ROI
Is Just Paperwork.
Response within one business day — from Andy or Romario directly.
Built for Build-to-Service
Designed for contractors who own the full asset lifecycle.
Bootstrapped Like You
No PE. No VC. We grow because the product works.
Response in 1 Day
You'll hear from Andy or Romario directly.
