Your project information matters.
Variations, photos and contracts are commercially sensitive. Below is what ProofPay actually does today — no certification claims we cannot evidence.
Secure login
Accounts are protected by email and password authentication with email verification and password reset.
Company-separated data
Projects, variations, evidence and invoices belong to your company. Access is checked per company membership on every request.
Controlled approval links
Client approval links use long, unguessable tokens and expose only the variation they were issued for.
Secure file uploads
Contracts and completion photos are stored in private buckets and served through short-lived signed links, never public URLs.
Server-side access controls
Permissions and pricing maths are enforced on the server with database row-level security, not in the browser.
Account and data deletion
You can delete your account from Settings. This removes your account and cancels any active subscription.
What we do not claim
ProofPay does not currently hold ISO certification or a formal compliance accreditation, and we do not make claims about specific data residency. If you have a procurement requirement, get in touch and we will answer honestly about what is and is not in place.