A roof survey is a set of high-resolution photographs of somebody's home, tied to their address. That deserves to be treated carefully, so we have made the way it is stored and shared simple enough to explain in one page.
Where your photographs live
- Every photograph and video is held in private storage — nothing sits on a public web address that a search engine could index.
- When you open your report, the images are unlocked with short-lived links generated at that moment; they expire on their own.
- Your report is reachable only through the private link we email you. It is a long random token, not a guessable number.
- We never publish your address, name or images to the public site, and reports are excluded from search engines.
For homeowners: who can see your report
You, anyone you forward the link to, and our surveyors. That's it. There is no homeowner login to be broken into because there is no homeowner account — the link is the access, so treat it like you'd treat an email attachment about your home. If you'd like a report link retired, contact us and we'll revoke it.
For trade accounts: separation between companies
- Every survey, photograph, finding, client and proposal is bound to your company at the database level, not just hidden in the interface.
- Ownership of a survey is stamped by the server from your signed-in session, so nothing can be re-pointed at another account.
- Report credits can only ever be spent from the balance of the company that owns the work.
- Team members see your company's work and nobody else's; removing someone removes their access immediately.
Client portals and sign-in codes
White-label client portals use a 6-digit code emailed to the client rather than a password, which removes the most common cause of account compromise. Codes are short-lived, single-use and rate-limited, so repeated guessing locks the attempt out rather than eventually succeeding.
Independent review
We run regular adversarial security reviews of the platform — deliberately trying to read or write another account's data — and fix anything found before it can matter. Access controls are enforced in the database itself, so a bug in a page or a button cannot hand over data it shouldn't.
Your data, your call
Ask us to delete a survey and its photographs and we will, other than anything we have to keep for accounting. We do not sell data, we do not pass your details to roofers, and we do not take referral fees — the same impartiality that shapes our reports shapes what we do with your information.