Security

How PanelVault protects records

A plain description of the controls that exist in PanelVault today. We do not claim certifications or compliance programs we have not completed.

Last updated September 2026

Per-company data separation

Every property, panel, equipment record, photo, and document belongs to exactly one company. Access rules are enforced in the database itself, not only in the app, so one shop's users cannot read another shop's records.

Authenticated accounts for electricians

Electricians and shop staff sign in with an email and password account. Team members are added by invitation, and roles control what a member can see and change inside their own company.

PIN-gated homeowner access

A scanned QR label alone does not open a record. The homeowner enters a short PIN set by the electrician, and receives read-only access to that single property. Homeowners never create an account.

Encrypted transport and scoped storage

All traffic to PanelVault is served over HTTPS. Uploaded photos and documents are stored in access-controlled storage scoped to the owning company, and are not publicly listable.

Managed infrastructure

PanelVault runs on managed cloud infrastructure with provider-side encryption at rest and automated backups of the database.

What we do not claim

PanelVault does not currently hold SOC 2, ISO, PCI, or HIPAA certification, and we do not describe our encryption with marketing terms like “military-grade.” If your organization has specific security requirements, contact us and we will answer directly.

Reporting an issue

If you believe you have found a security issue, please reach out through the contact page so we can investigate.

Questions? Contact us.