Security at CleanZ
CleanZ is designed to keep personal data about the people a facility serves out. It stores rooms and areas, tasks, products, staff roles and cleaning results, not patient, resident, student or guest information. The table shows each control and its real status, so your security team can see what exists, what is in progress and what is planned.
Controls and their status
| Control | Status | Notes |
|---|---|---|
| No personal data about the people you serve | Pilot release | No patient, resident, student or guest information |
| Encryption in transit and at rest | Pilot release | TLS for all traffic; encrypted storage for data and photos |
| Multi-factor sign-in | Pilot release | Required for managers and admins |
| Role-based access | Pilot release | Cleaner, supervisor, spot-check reviewer, admin |
| Append-only audit log | Pilot release | Every change, override and approval is kept |
| Full data export | Pilot release | CSV and PDF, at any time |
| Shared-device sign-in | Pilot release | Fast switch by PIN or badge scan |
| Written security policies and questionnaire answers | In progress | Part of the security packet |
| Single sign-on (SAML, OpenID Connect) | Planned | Version 2 |
| SOC 2 Type I, then Type II | Planned | Type I in Version 2; Type II in Version 3 |
| Independent penetration test | Planned | Before the first large contract |
| Hosting provider and region | In progress | Not yet published |
| Subprocessors | In progress | Not yet published |
This website
No advertising trackers and no analytics. Form submissions are sent only to our team's inbox, through Resend, an email delivery service. The site sets no cookies, so it needs no cookie banner. Privacy policy
Request the security packet
Architecture overview, data-flow diagram, policies and standard questionnaire answers.
Report a vulnerability
Write to [email protected]. We acknowledge reports within two business days.
Bring your security questions to the walkthrough.
A person replies within one business day.