Compliance and certifications

Pathizer uses reasonable administrative, technical, and organizational safeguards to protect information. No system is perfectly secure, and users remain responsible for protecting credentials, reviewing workspace access, and using appropriate project-data controls.

Uploaded project files and schedule data are stored using Cloudflare R2 object storage, and account and application records are maintained using Google Cloud and Firebase services. Data is encrypted in transit using industry-standard TLS and encrypted at rest by these storage providers. Access to customer data is restricted through organization- and project-level access controls. Pathizer personnel access customer project data only where necessary to operate the Services, provide support you have requested, investigate a security or abuse concern, or comply with law.

BREACH NOTIFICATION. If Pathizer becomes aware of a security incident that has compromised the confidentiality, integrity, or availability of your data, Pathizer will notify affected organization administrators without undue delay and in any event within seventy-two (72) hours of confirming the incident. The notice will describe what is known about the nature of the incident, the categories of data involved, the steps Pathizer is taking, and what you can do, and will be supplemented as more becomes known, rather than delayed until the picture is complete. Pathizer will provide the information reasonably necessary for you to meet your own notification obligations.

Pathizer has not completed a SOC 2, ISO 27001, or comparable third-party security audit, and does not claim any such certification.

Security reports may be sent to security@pathizer.com.