Security and your records
How your records are kept.
Inspection records are only useful if they can be trusted. Here is what we can say plainly about how AED CheckTrac handles them.
What we can tell you today.
Accounts are created by invitation
No one can create their own account. An organization administrator invites each person and chooses their role.
Sign-in rules
Passwords must meet a minimum length and cannot repeat recent passwords or contain the username or email. Repeated failed sign-ins are temporarily blocked, and sessions end after a period of inactivity.
Inspection history is append-only
Inspection records cannot be edited or deleted through the application once recorded. A correction is a new entry, so what was recorded, and when, stays on the record.
Your records are exportable
An organization administrator can export your records.
Where it runs
The application, its database and the sign-in service run in the United States (Render, Oregon region). Some features use third-party services, such as Google Maps for site maps and address lookup, and Amazon Web Services for file storage and email.
Plain about the limits
What this page does not say.
This page lists only what we can support today. It does not describe certifications, encryption, backups or every third-party service, and it is not a promise about uptime, recovery or any outcome. AED CheckTrac records what was inspected and what evidence exists. It does not guarantee that a device will work, state that a program is compliant, or give clinical, legal or compliance advice.
Need more detail for a security review? Ask us and we will answer in writing.