Security built into the operating model.
Arcvena is built around multi-tenant isolation, private storage, role-based access control and auditable administrative actions. We describe the controls that are implemented and do not advertise certifications or guarantees we have not independently verified.
Multi-tenant data isolation
Every firm's data is isolated at the database level using row-level security (RLS). No firm can access another firm's records — not through a bug, not through a misconfigured query.
Role-based access control
OWNER, OFFICE_MANAGER, and TECHNICIAN roles have explicitly defined permissions. Technicians access only field-relevant data. Office staff cannot access billing without appropriate permissions.
Encrypted storage
Managed infrastructure provides encryption at rest, and photos, documents, and permit files use private storage with controlled signed access rather than permanent public links.
Audit logging
Key actions — member role changes, deactivations, data exports — are logged with actor and timestamp. These records support review of who performed sensitive administrative actions and when.
Infrastructure
Arcvena runs on Supabase (PostgreSQL) and Cloudflare. Application traffic uses encrypted HTTPS/TLS connections, privileged service credentials remain server-side, and RomyLabs does not sell customer data.
What electrical contractors should ask
A security page should answer operational questions.
Ask how another company is prevented from querying your records, how private files are protected, who can change staff access, what gets logged, how privileged credentials are handled, and what happens when an employee leaves.
Questions about security?
We're happy to discuss our architecture and security practices in detail during your demo.