Security & Data | TurnoutFlow

Where your data lives

TurnoutFlow runs on Amazon Web Services in the United States.
Department records sit in an Amazon RDS PostgreSQL database in a private network, not reachable from the internet.
Automated daily backups with seven days of point-in-time recovery, and deletion protection on the production database.

Every connection to TurnoutFlow uses HTTPS (TLS 1.2 or later).
The database, document storage, and server disks are encrypted at rest.
Social Security numbers are encrypted a second time inside the application with AES-256, on top of disk encryption.

Staff see only the last four digits of an SSN. The full number is shown only to staff your department has given that permission, each time with a reason. Every reveal is logged with who, when, and why, in an access log your department can audit and nobody can edit.
Uploaded documents live in a private storage bucket and download only through a signed-in session. TurnoutFlow never issues shareable file links.
TurnoutFlow stores no patient care (ePCR) data.

Each department’s data is kept separate from every other department’s, and hundreds of automated tests check that one department can never read or change another’s records.
Your department decides who can see and do what: roles you can rename and edit, plus individual permissions for a member who needs more.

The audit log is append-only: entries cannot be edited or deleted, except by the seven-year retention purge.

Export your records from each area (roster, applicants, assets, reports, and more) to a spreadsheet at any time.
Ask us to, and we delete your department’s data.
Members can delete their own sign-in account at any time. The records your department must keep under public-records law stay with the department.
Our own product analytics contain no names, email addresses, or phone numbers.