Security

Overview

MekryPro is built to protect your job-site data, documents, and user accounts. Security is part of the architecture: access control, logging, backups, and encrypted transport.

Encryption and transport

• HTTPS/TLS: traffic between your device and our servers is encrypted.
• Passwords: stored using strong hashing (no plaintext passwords).
• Sessions: protected session practices and secure cookies where applicable.

Access control

• Role-based access: users can access only the projects and data they are permitted to.
• Subcontractors: access can be limited to approved job sites/projects only.

Logging and monitoring

• We log security-relevant events (e.g., sign-ins and errors) to prevent abuse.
• Logs are also used for troubleshooting and improving reliability.

Backups and recovery

We maintain backups to support service continuity and reduce the risk of data loss with recovery procedures.

Location tracking

If driving/location tracking is enabled, location is collected only with user permission. Permissions can be revoked in device settings. Use the minimum permission level you need (e.g., only while tracking).

Report a vulnerability

If you discover a security issue, contact us at: info@mekry.fi and include clear steps to reproduce.