Data ownership & security

Your data is yours#

The customers, sites, jobs, estimates, proposals, costs, photos and measurements your company creates in TruTec belong to your company.

• Read it through the API at any time: customers, sites, jobs, estimates, job costing, measurements and photos. Create and update customers, sites and jobs from your own systems (Customers & sites, Jobs, Estimates & proposals).
• Export all of it, in bulk, whenever you want, including if you ever decide to leave (Bulk data export).
• Keep what you pull. Store API results in your own database, warehouse or document system and keep them for as long as you like. They don't expire and you don't need to call us again to use them.
• Use it with your own tools, including AI tools inside your company, through the API or the MCP server.

Using measurement results#

Measurement quantities (areas, counts, lengths) and condition ratings are yours to use: put them in your estimates and proposals, show them to your customers, and store them in your systems.

Aerial imagery is licensed from imagery providers. You can show it to your customers inside TruTec proposals, shared links and exports. If you want to republish raw imagery outside TruTec, talk to us first, because the provider's terms apply.

How we protect it#

Encryption in transit	HTTPS (TLS) on every request. Plain HTTP isn't served
Workspace isolation	A key can only reach its own workspace. Records in other workspaces always return 404
Key storage	Keys are shown once and stored only as a salted hash
Least privilege	Per-key permissions, with deletes off by default (Authentication)
Revocation	Revoking a key takes effect on the next request
Hosting	United States
Status	Live uptime and incidents at status.trutec.ai

Read more on our security page. Security questionnaires and vulnerability reports go to [email protected].

Server-to-server only#

The API is built to be called from your servers. Keys are secrets: keep them out of browser code, mobile apps and source control (Authentication).