Security & trust
Records that hold up when someone disputes them.
A closeout package is only worth what it can prove months later. RTI writes every action into a chained activity log, keeps each workspace walled off from every other one, and hands the whole record back to you as files whenever you ask.
The audit trail
Each record carries the one before it
When an action is written, RTI hashes it together with the hash of the previous entry in that workspace.
REC-0039 · 14:18 · hash 3b19…77e0 · prev d02c…41ab
REC-0040 · 14:26 · hash 9f5c…10d4 · prev 3b19…77e0
REC-0041 · 14:32 · hash a4f7…9c21 · prev 9f5c…10d4
Change any record and every hash after it stops matching. The break is visible, permanent, and dated.
Four things we hold ourselves to
Tamper-evident
Every entry in the activity log is hashed with SHA-256 over the previous entry's hash, so the log forms one continuous chain per workspace.
Isolated
Row-level security scopes every row to one company. Reads and writes are filtered in the database itself, not in application code.
Yours
Full CSV and PDF export, anytime. Submissions, responses, photos, signatures and sign-offs come out as files you keep — no lock-in.
Available offline
Field submissions and their photos queue on the device and sync when signal returns, so a dead spot never costs you the record.
Security questions we get asked
In plain language
What is stored
Your workspace and projects, the tags you print, your checklists, each inspection with its answers, photos, observations and signatures, and an activity log entry for every action taken.
Where it lives
In a managed Postgres database with the app's storage buckets alongside it. Every photo, signature and logo bucket is private — files are only ever served through a link that expires after an hour.
Who can see it
The people you invite, and clients you deliberately grant access to specific projects. Row-level security scopes every query to your company, so another workspace's account cannot read your rows.
RTI does not hold a third-party security certification, and we will not claim one. What we will tell you is exactly how the product is built — and you can export every record and walk away with it at any point.
Put it on a real project.
Run a walk, then open the activity log and check the chain yourself.
Start free