Legal & Compliance

Privacy Policy.

Effective Date: August 17, 2026

End-to-End Encrypted

All data is encrypted in transit (TLS 1.3) and at rest (AES-256).

Zero Data Selling

Your operational data remains yours. We never sell data to third parties.

ISO 27001 Certified

Our infrastructure adheres to strict global security standards.

1. Introduction

At EngiBridge OS ("we," "our," or "us"), we are committed to protecting the privacy and security of the enterprise data entrusted to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our unified operating system for enterprise construction, including our web application, mobile applications, and API services (collectively, the "Platform").

2. Information We Collect

As an enterprise SaaS platform, we process data on behalf of our enterprise clients. We collect information in the following categories:

  • Account Information: Name, work email address, phone number, job title, and corporate credentials required for Role-Based Access Control (RBAC).
  • Operational Data: Project schedules (Gantt/Kanban), site diaries, material ledgers, procurement POs, and related construction lifecycle documents uploaded to the Platform.
  • Compliance Data: Worker certifications, safety licenses, and work permits strictly for site access and safety compliance validation.
  • System Data: IP addresses, browser types, audit logs, and usage analytics to ensure platform security and optimize performance.

3. How We Use Your Information

We use the collected information strictly for the following purposes:

  • To provide, operate, and maintain the EngiBridge OS Platform.
  • To enforce enterprise-grade security, authenticate users, and prevent fraud.
  • To process automated ESG ledgers and generate predictive AI risk analytics exclusively for your organizational dashboard.
  • To provide customer support and respond to technical inquiries.

We do not use your operational data or proprietary construction models to train public AI models. All AI processing is siloed per tenant.

4. Data Storage and Security

We implement enterprise-grade technical and organizational security measures to protect your data. All data is encrypted at rest using AES-256 and in transit using TLS 1.3. Our primary data centers are hosted by industry-leading infrastructure providers (e.g., AWS/Azure) with SOC 2 Type II and ISO 27001 certifications.

5. Third-Party Subprocessors

To operate the Platform, we engage carefully vetted third-party subprocessors (such as cloud hosting and email delivery services). We require all subprocessors to enter into strict Data Processing Agreements (DPAs) that obligate them to protect your data to the same standard we do. We do not sell, rent, or trade your personal or corporate information.

6. Your Data Rights

Depending on your jurisdiction (e.g., GDPR, CCPA), you may have the right to:

  • Access the personal data we hold about you.
  • Request the correction or deletion of your personal data.
  • Restrict or object to our processing of your data.
  • Request data portability.

Because EngiBridge OS acts primarily as a Data Processor for our enterprise clients, individual users seeking to exercise these rights should generally contact their corporate system administrator first.

7. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or relevant laws. We will notify enterprise administrators of any material changes via email or through a prominent notice on the Platform prior to the change becoming effective.

8. Contact Us

If you have any questions about this Privacy Policy or our security practices, please contact our Data Protection Officer at:

Email: privacy@engibridge.com
Address: EngiBridge Legal Department, Suite 400, Tech District.