Security & Trust

How PatrolKey protects your company’s information

PatrolKey is a professional security operations platform for independent security companies. This page explains what PatrolKey does today to protect your company’s accounts, operational records, reports, photos, and related information.

Protecting access

PatrolKey accounts use email (or company code and employee ID) and a password. Passwords are stored with Argon2id hashing. PatrolKey does not store plaintext passwords.

Sign-in uses an HTTP-only session cookie. Sessions last 12 hours and do not extend just because someone stays active. After several failed sign-in attempts, further attempts are temporarily blocked.

People in your company have roles (for example owner, manager, supervisor, officer). Those permissions are enforced by PatrolKey’s application server, not only by hiding screens.

Keeping companies separate

Each PatrolKey company is a separate customer account. Operational records are limited by the application and by PostgreSQL row-level security so one company cannot open another company’s operational data through the product.

Information in transit

The PatrolKey application is served over HTTPS. Requests that arrive as HTTP are redirected to HTTPS.

Files and records

Report photos and company logos are stored in PatrolKey’s application file storage. They are not published as open website files. Opening them requires a signed-in user with permission in that company.

PatrolKey keeps an in-product audit trail of important account and operations events. People in your company who are allowed to view Audit can review that activity.

Payments

Subscription payments are processed by Stripe. Card numbers are entered on Stripe. PatrolKey does not store full payment-card numbers or CVC. PatrolKey may keep limited billing details such as card brand, last four digits, and Stripe identifiers needed to run the subscription.

Infrastructure

Customer traffic reaches PatrolKey through the HTTPS website. The production database and application services are not offered as public internet endpoints.

Using PatrolKey securely

No internet-based service can guarantee absolute security. You remain responsible for who you invite, for protecting sign-in details and devices, and for removing access when someone should no longer use the account.

Questions

Email support@patrolkeysystems.com.

PatrolKey Systems LLC · New Hampshire, United States · PatrolKeySystems.com