Security

Security & data handling, in plain terms.

EZ70B holds the records your NFPA 70B (2023) Electrical Maintenance Program produces — inspection history, findings, one-line diagrams, engineering studies. This page describes exactly how that data is isolated, stored, backed up, and returned to you. No adjectives; every claim here is checkable.

Now enforceable

NFPA 70B became enforceable in 2023. OSHA and most insurers already expect a documented EMP.

If you can't show one when an audit, inspector, or underwriter asks — you don't have one. See what compliance looks like →

Section 01 — How your data is handled

1.1

Tenant isolation

Every account's records live behind Postgres row-level security: each account-scoped table carries database policies that restrict reads and writes to members of that account. Our CI suite exercises those policies with per-table isolation tests.

1.2

Payments

Checkout and billing run on Stripe-hosted pages. Card numbers go directly to Stripe and never touch EZ70B servers — we store only the metadata needed for receipts (card brand, last four digits, expiry).

1.3

Transport & headers

All traffic is served over HTTPS with HTTP Strict Transport Security (HSTS), a Content-Security-Policy, and frame-embedding and MIME-sniffing protections on every route.

1.4

Files

Nameplate photos and document attachments are stored in private buckets with account-scoped paths. Downloads use expiring signed links (one hour) — your records have no public URLs.

1.5

Backups

The database is snapshotted daily, and every schema change is preceded by an additional snapshot to independent storage. Backup retention is up to 90 days, consistent with our privacy policy.

Section 02 — Your data, your records

Your records are yours. Three export paths exist today:

  • Print or save your EMP records binder to PDF at any time — equipment inventory, inspection history, findings, engineering studies, and Qualified Person roster in one dated document.
  • Export your one-line diagram as a vector PDF, in IEEE 315 or friendly symbols.
  • Request a full export of your data in machine-readable format — available while your subscription is active and for 30 days after cancellation, before your data is deleted from production systems.

Retention and export terms mirror our privacy policy.

Questions about any of this?

Ask us directly — we'll point you at the specific practice, policy, or document behind any claim on this page.

Contact us →

Prefer email? info@phasetechllc.com