Your data is protected at every layer

CLUE is SOC 2 Type II certified and built on AWS with end-to-end encryption, role-based access controls, and continuous monitoring so your fleet data stays secure.

SOC 2 Type II Certified
AWS Cloud Hosted
TLS 1.2+ Encrypted
GDPR Compliant
MFA Enforced

Trusted at over 5000 construction sites in the USA and worldwide

Enterprise-grade security, built for construction

From infrastructure to identity, every layer of CLUE is designed to keep your operational data safe, private, and available when you need it.

Orange cloud icon with six connected lines ending in circles representing cloud computing.

Cloud Infrastructure

Hosted on AWS with isolated production environments
Auto-scaling for high availability and uptime
Separate prod, staging, and dev environments
Regular access audits and least-privilege enforcement

Orange shield outline with a padlock symbol inside and circuit lines extending outside the shield.

Data Encryption

All data encrypted in transit via TLS 1.2+
Data encrypted at rest across all storage layers
Secure API communication for all OEM integrations
Encrypted secrets management for credentials

Identity & Authentication

AWS Cognito identity management with MFA
SMS-based two-factor authentication for all users
Automatic session expiration and token rotation
Phone-number-based identity verification at login

Access Control

Granular RBAC across all platform modules
Organization-level data isolation no cross-tenant access
Configurable permissions by module, action, and scope
MFA enforced for all internal AWS infrastructure

Orange computer screen icon showing bar chart, pie chart, and line graph for data analysis.

Monitoring & Response

Continuous infrastructure monitoring via CloudWatch
Real-time error tracking with automated alerting
Security incident log maintained and reviewed
Defined escalation and response procedures

Outline of a person holding a shield with a checkmark symbolizing data protection.

Data Privacy

GDPR compliant, DPAs available upon request
Customer data used solely to deliver the platform
Defined data retention and deletion policies
Privacy controls configurable at org level

SOC 2 Type II Certified

Independently audited by a licensed CPA firm. Controls tested over a sustained period and verified against the AICPA Trust Service Criteria. Full report available under NDA for enterprise customers.