Security & Trust

Access built around your company and your projects.

Project and financial information is sensitive. Stosh Build controls access at the organization level and the project level, so the right people see the right information — and nobody else does.

Organization isolation

Each company's projects, contracts, and financial data are isolated at the organization level.

Project-level permissions

Access is scoped by project and by role — visibility isn't all-or-nothing across a company.

Role-based access

What a user can see and change is governed by their role, not just whether they're logged in.

HTTPS everywhere

All traffic to and from Stosh Build is encrypted in transit.

Secure file storage

Documents, drawings, and attachments are stored and accessed through controlled, secure paths.

Monitoring & backups

Systems are monitored, and backup and recovery practices are part of normal operations.

What We Don't Claim

Straightforward about where things stand.

Stosh Build does not currently hold formal certifications such as SOC 2, ISO 27001, or HIPAA compliance. What's above reflects how the platform is actually built and operated today — controlled access to sensitive project and financial information is treated as a first-order requirement, not an afterthought.