Skip to content

Security & infrastructure

Your data is yours, your records are complete

CloudotNet's approach to security rests on separating every company's data in the database itself, letting people see only the records they're authorized for, and keeping the work done on tasks traceable. This page explains, in plain language, the details your technical team may ask about.

Every company's data is separated at database level

CloudotNet serves many companies from the same infrastructure, but their data never mixes. This separation isn't only applied on screens; it's enforced in the database where the data lives.

  • On every query, the database returns only records that belong to the signed-in user's company.
  • Separation rules are defined per table, and every new table is created with these rules.
  • Checks in the application layer are a second layer on top of these rules.

Access by project

Inside a company, not everyone sees everything either. Each branch, site, facility or line of work is opened as a separate project, and users only access records in projects they belong to.

  • Adding a user to a project or removing them changes their access immediately.
  • Project membership is also checked at database level.

Roles and permissions

Roles decide who can see and change what. Field staff see their own jobs; areas such as costs, reports and settings are visible only to people you authorize.

  • You define your own roles and grant permissions to roles in one go.
  • Permissions are granted per area and per action (view, create, edit, delete).

Task history and backups

Who a job was assigned to, when it was closed and who edited it are recorded in the task's history. When you wonder why a job changed, you can look back.

  • Every step on a task is kept with who did it and when.
  • Photos and documents added when closing a job are stored with the job.
  • All times are shown in your organization's time zone.
  • Your data is backed up regularly.

Sign-in and session security

Sign-in runs on a separate authentication server; passwords are not stored in the database that holds your business data.

  • Accounts are opened with email verification; staff join through an invitation email.
  • You can strengthen sign-in with two-step verification through an authenticator app or with a passkey.
  • You can see your open sessions and end the ones you don't recognize.
  • All connections between your browser and CloudotNet are encrypted (HTTPS).

API access for developers

Your developers can connect your own systems to CloudotNet by creating an API key. A key is shown in full only once when it's created and can be revoked at any time.

API keys guide →

More questions?

If your security team has further questions, write to us and let's go through our infrastructure and processes together.

Got a question? Let's talk directly.

Tell us about your work and we'll walk you through the right setup on screen. Or just give us a call.