How Watchtower protects your data
Watchtower holds attendance records, incident evidence and site locations for several security companies at once. This page says plainly how that data is kept apart and protected, and what we do not yet have.
Tenant isolation
Every record belongs to one company, and the database itself enforces it: on every request it checks that the row belongs to the signed-in person’s company, and refuses otherwise. This does not depend on the application behaving correctly. We test this with automated checks that try to read and change another company’s records.
Who can do what
There are four roles: guard, supervisor, admin and manager. The server enforces them, not just the screens. A supervisor can manage guards but cannot create, change or suspend an admin or another supervisor; an admin cannot create another admin.
Signing in
- Invitation only. There is no public sign-up. Companies are set up by us, and every account is created by an administrator.
- Guards and supervisors in the app sign in with a company code, phone number and a 4-digit PIN. PINs are stored only as one-way hashes, and an account locks for a time after repeated wrong PINs, so a PIN cannot be guessed by trying many times.
- Administrators in the portal sign in with email and password. Passwords are stored only as one-way hashes. Invitation and reset links expire.
- Administrators can issue a new PIN or temporary password for a member of staff, and suspend an account at any time.
Where the data lives and how it is protected
- The database and file storage are hosted by Supabase in Singapore. The portal and website are served through Cloudflare.
- Data is encrypted in transit (TLS) and encrypted at rest by our hosting provider.
- Incident photos are kept in private storage and shown only through short-lived links, never a public address.
- Changes to staff, shifts, attendance and incidents are recorded in an audit log that a company’s managers can view.
- The mobile app saves clock-ins and incident reports on the phone while there is no signal and sends them when it reconnects.
- An attendance export (CSV) is available at any time, so a company is never locked in to its own records.
Sub-processors
| Provider | Used for |
|---|---|
| Supabase | Database, sign-in, file storage, backend functions |
| Cloudflare | Hosting the portal and website, DNS |
| Resend | Invitation and password-reset emails |
| Expo / Google Firebase Cloud Messaging | Push notifications and app updates to Android |
More on what we collect and why is in the Privacy Policy.
Where we are today
We want you to be able to judge us on facts. We do not currently hold a SOC 2 or ISO 27001 certification. A security questionnaire response and a data processing agreement are available on request during procurement: email security@watchtower.ae.
Reporting a vulnerability
If you think you have found a security problem, please email security@watchtower.ae with the steps to reproduce it, and please do not access data that is not yours. We will acknowledge your report and keep you updated as we fix it.