Security & Trust

Your data is your business.
Read about our data practices.

BuilderMaxPro handles sensitive financial data, legal documents, and business information. We take that responsibility seriously.

Current as of November 8, 2026

Security reports and vulnerability disclosures may be sent to security@buildermaxpro.com.

Encryption

  • Website connections use HTTPS
  • Documents are stored in Cloudflare R2, which encrypts stored files
  • Web sign-in uses HTTP-only session cookies

Infrastructure

  • Hosted on a virtual private server
  • Automated daily database backups, kept for 30 days

Access Control

  • Role-based access for company users (Admin, Project Manager, Field)
  • Each company's records are scoped to its own account

Data Handling

  • Company administrators can export company records as JSON
  • See our Privacy Policy for how we handle data
  • Standard browser sessions sign out after inactivity

Compliance & Legal

  • Texas-based company
  • Lien notice drafts require user acknowledgements of data accuracy and compliance responsibility before finalization
  • Platform is NOT a law firm — clear compliance automation disclaimers
  • Construction glossary available in English and Spanish
  • Consult a qualified attorney for legal advice

Security Roadmap

Planned security work; availability and timing have not been committed.

Roadmap items may change as priorities, vendor reviews, and production readiness change.

BMP has begun a SOC 2 readiness program; examination timing and scope have not been set.Readiness program
Two-factor authentication (2FA)Planned
Single Sign-On (SSO) for EnterprisePlanned
Audit logging for all data accessPlanned
Penetration testing by third-party firmPlanned
Bug bounty programUnder Review

Responsible Disclosure

Found a security vulnerability? We appreciate responsible disclosure. Please report security issues directly — do not post them publicly. security@buildermaxpro.com