Trust

Security without inflated claims.

We publish what the product does today, call out what still requires customer validation, and avoid implying certifications we have not earned.

Account access

Account authentication is handled through WorkOS. Protected application routes and data APIs re-check the signed-in principal before returning account data.

Data boundaries

Saved layouts and operational records are scoped to their owning account or organization. We test protected APIs to fail closed for signed-out visitors.

Operational integrity

CanopyTerra is designed to keep operational records connected to a saved room model. It should not be treated as a substitute for required regulatory records until your organization has validated the workflow for its jurisdiction.

Current assurance

CanopyTerra does not currently claim a third-party security certification on this site. Deployment-specific controls and assurance requirements should be reviewed before purchase.