Security & data

Your asset and inspection data is the point of the platform. Here is where it lives, how it is protected, and who can reach it.

Where your data lives

Enervid runs on Amazon Web Services in the EU (eu-north-1, Stockholm). Application data is stored in a managed Amazon Aurora (MySQL) database; inspection imagery and reports are stored in Amazon S3 and served through Amazon CloudFront. Data stays within the EU region.

Encryption

  • In transit: HTTPS/TLS across the marketing site, the application, the login domain and the API.
  • At rest: database, object storage and backups are encrypted at rest using AWS-managed keys (AES-256).

Authentication & access control

  • Sign-in uses the OAuth 2.0 authorization-code flow via Amazon Cognito; sessions are held in HTTP-only cookies, not in the browser where scripts can read them.
  • Role-based access control (admin, operator, inspector, repair) is enforced at the API and at the edge, so each user only reaches the data their role allows.
  • Organisations are isolated from one another. Inspection companies and repair companies only see the work assigned to them.
  • Access to high-resolution imagery is gated by verified, time-limited signed URLs, so images cannot be reached without an authorised session.

Backups & availability

The database uses automated backups and point-in-time recovery. Static assets and imagery are stored with the durability guarantees of Amazon S3 and distributed via CloudFront.

Data ownership

Your data is yours. You control who has access and what they can do with it. With a white-label deployment, the platform runs on your own AWS account, so your data never leaves your environment. A data processing agreement (DPA) is available on request.

Sub-processors

Our primary infrastructure sub-processor is Amazon Web Services (EU region). A current list of sub-processors is available on request.

Responsible disclosure

If you believe you have found a security issue, please email info@enervid.com and we will work with you to verify and resolve it. Please give us a reasonable window to remediate before any public disclosure.

On the roadmap

We are building towards formal certification (for example ISO 27001 / SOC 2). If your procurement process needs specific answers or a security questionnaire completed, get in touch and we will respond directly.