Documentation
Security
What an IT department should want to know before a practice puts client property data in SurveyDock. Everything on this page describes what is actually built — it is kept in step with the product, not with a questionnaire template.
Signing in
Accounts are created by your admins
There is no self-serve signup into an existing practice. An Admin creates every login and chooses its role, and only an Admin can change what anyone sees — surveyors never sign themselves up. The same applies to your clients' portal logins, which your admins create and revoke.
Failed sign-ins are throttled
Password sign-in is rate limited per account, on the server: ten failed attempts exhaust the allowance, which refills at one attempt every six minutes, and a successful sign-in resets it. While exhausted, further attempts are rejected before the password is even checked. Client portal passwords are randomly generated by default, which puts them beyond online guessing entirely.
Passwords are hashed, never stored
Passwords are held only as salted scrypt hashes. SurveyDock cannot read a password back, and neither can we — a forgotten password is replaced, not recovered.
Leavers are signed out immediately
Deactivating someone invalidates every session on every device at that moment — there is no window where a leaver's phone still works. Their historic work is untouched and attributed, and reactivation is one click if they return.
Inside the account
Every request is authorised on the server
Role checks — Admin, Director, Surveyor, Accounts — run inside every backend function on every call. Hiding a button in the browser is never the control; a request that fails the server-side check is refused regardless of where it came from.
One practice cannot see another
Every record belongs to exactly one organisation, and every read and write is scoped to the caller's organisation after a membership check. There are no cross-tenant queries in the product at all.
Portal logins are fenced off
A client's portal login is linked to exactly one client record. It can read that client's reports and nothing else — no practice dashboard, no other clients, and no write access to survey data.
An append-only audit trail
Survey records carry an activity history of who did what and when, with an account-wide audit log for Admins and Directors. It covers survey edits, approvals and exports, staff accounts and role changes, sign-ins and blocked sign-in attempts, client portal access and report views, and changes to your organisation's settings, branding and web addresses. Admins can export it to CSV for any date range, user, area or action, so an assessor can be handed the evidence directly. Audit events are written once and never edited or deleted by anyone, including us.
Hosting & data
Hosted in the EU, encrypted throughout
The application is served by Vercel; the database and backend run on Convex in AWS eu-west-1 (Dublin). Traffic is TLS on every host — including your own domain when you attach one, whose certificate is provisioned and renewed automatically — and data is encrypted at rest by the platform.
Your data stays exportable
A practice admin can export the entire account — every record and photograph — with no request form and no charge, and the format is documented publicly. Contractually, the account stays reachable for 30 days after you leave so the export can still be run.
Deletion means deletion
When data is deleted it leaves backups within 30 days. Our subprocessors are listed in the Data Processing Agreement with notice before any change, and we commit to breach notification within 48 hours.
What we don't yet claim
SurveyDock has not yet been through a SOC 2 or ISO 27001 audit, and two-factor authentication is not yet available — both are on the roadmap. We would rather state that plainly and document the controls that do exist than hand you a questionnaire answer.
The export format is documented at /docs/data-export, and the contractual commitments behind this page live in the Terms of Service and Data Processing Agreement.
Questions and disclosure
If your IT team has a question this page doesn’t answer, or you believe you have found a security problem in SurveyDock, email support@surveydock.co.uk and it will reach the people who build the product. We take reports seriously and will tell you what we did about yours.