Backups are written to storage in your own AWS or Azure account. The portal reads from that storage to show you your records.
Your records stay in your account.
SIINC was built for the questions IT, risk and legal teams ask before approving a backup tool. Here is how it handles your data.
Where data lives
- Bring your own storage
- Backups are written to Amazon S3 or Azure Blob Storage in your own cloud account, in the region you choose.
- Nothing to install
- SIINC is a hosted service. No agents or servers run on your network.
- You keep the copy
- If you stop using SIINC, every backup stays in your bucket as original files plus JSON metadata, in a documented folder structure.
- Immutable storage works
- SIINC works with S3 Object Lock and Azure immutable storage turned on, so your retention rules can't be bypassed.
Access to your platforms
- Official APIs only
- SIINC connects to Procore, Autodesk Forma, BIM 360 and Oracle Aconex through each platform's official API. SIINC is an Autodesk Authorized Developer.
- Backups read, restores write
- Backups only read from the source platform. Restores write records back into Procore, Autodesk Forma and BIM 360 or Aconex, including into another account, when you run one. The optional Enterprise archive feature brings archived Autodesk projects into backup scope, on request or automatically.
- Your permissions apply
- SIINC captures what the connected account is allowed to see, and nothing more.
Access to SIINC
- Single sign-on and two-factor
- Microsoft Entra ID sign-in and two-factor authentication.
- Roles
- Role-based user management so the right people run jobs, view records or administer the tenant.
- One tenant per customer
- Each customer gets an isolated workspace. Storage and platform credentials are held centrally per tenant.
Encryption and testing
- AES-256 encryption
- Data is encrypted with AES-256 at rest and in transit.
- Independently tested
- SIINC is independently penetration tested by a third party.
- SOC 2 and ISO 27001
- SOC 2 Type II and ISO 27001 are both in progress.
Proving it
- Execution history
- Every run is recorded with its scope, size, warnings and errors, and summaries are emailed to your team.
- Client audit log
- Every user and admin action is recorded, kept for 12 months, and can be exported for reviews.
- Tamper-evident records
- A checksum is recorded for every file, and the run history is tamper-evident.
- Reports
- Private, shared and system report templates, on demand or scheduled, in PDF, Excel, CSV or HTML.
Need our security questionnaire answers or architecture overview for a vendor review? Ask us and we will send them over.
SIINC security questions
SIINC security questions
Only when you restore. Backups read from the source platform and write to your storage. Restores write records back into the platform, including into another account, when you run one. The optional Enterprise archive feature brings archived Autodesk projects into backup scope.
We will walk your IT or risk team through the data flow on a live project.