Where your data lives, and what protects it.
This page is written for the person who will have to sign. It claims no certification we do not hold, it describes only what is in place today, and it does not hide the points that are your choice rather than ours.
Your instance, your database, your domain.
TerraForce is not a shared service where every company lives in the same database. Each customer has its own instance and its own database, hosted in Europe by default. Hosting in your country or on your own infrastructure is considered case by case.
| Point | What is provided |
|---|---|
| Default hosting | In Europe, with a provider named in the contract. A database dedicated to your company and daily backups are included. |
| Hosting on request | In your country, or on your own infrastructure. Considered case by case: we tell you what it changes in schedule, cost and operations before committing. |
| Database | One dedicated database per customer. No two companies’ data in the same table. |
| Encryption in transit | HTTPS enforced, redirection forced, certificate renewed automatically. No page of the platform is served in the clear. |
| Data residency | Your data and your documents stay in the hosting zone agreed in the contract. They pass through no third-party service. |
| External dependencies | None required to run. The platform calls no third-party service to render a screen. |
| Trackers and advertising | None. No behavioural analysis, no ad network, no data resale. That is not our model. |
Who can read what
Roles and scopes
An account carries a role and an entity scope. The restriction is applied at the data source, not by a display filter.
Passwords
Stored as a computed hash, never in the clear and never reversible. A forgotten password is reset, not recovered, including by us.
Sessions
The session identifier is regenerated on every login, which closes session fixation. The session is destroyed on logout, and every write form carries an anti-replay token.
Injection and escaping
Prepared statements on every database access, and systematic escaping of every value displayed.
Security headers
A restrictive content policy, and protection against framing by a third-party page and against content-type sniffing.
Write audit log
Every creation, change and deletion is recorded with its author, its date, and the value before and after. A record’s history does not get rewritten: it is the first source consulted when there is doubt.
Backups, restoration, reversibility.
-
Daily backup
Database and uploaded documents, backed up every night, with a retention period agreed in the contract. A backup that has never been restored is not a backup: restoration is tested at go-live.
-
Your data is exportable at any time
Lists export from the interface. The complete database is handed over on request, in a standard format any provider can read.
-
Photographs and documents kept
Intervention attachments are kept for the period agreed with you. This is a point to settle together: the volume grows fast, and archiving has a cost that is better raised at the start.
-
If you leave
You get all of your data and documents back. We hold nothing back and we do not charge for exit. A reversibility clause is in the contract.
What the platform actually holds.
Professional data: the identity and contact details of your staff and your customer contacts, assignments, intervention timestamps and signatures. It is not much, but it is not nothing, and it deserves to be stated plainly to your teams.
- No data is passed to a third party, or to us, without your request
- You are the data controller; we act as a technical processor
- Named access makes it possible to answer an access or erasure request
- The logs separate business actions from technical maintenance access
What we do not claim. We do not display certifications we do not hold. If your organisation requires one, say so during the consultation: we will tell you what we can commit to contractually and what we cannot.
See the platform run on your own cases
An hour is enough: you open a request, assign it, close it and print the signed work order. Then we look at how your operation fits in: your customers, your sites, your contractual deadlines.