Backups are written into Amazon S3 or Azure Blob Storage in your own account. SIINC holds storage and platform credentials per tenant in isolated workspaces.
Everything a security reviewer asks for, in one place.
For IT, security and procurement teams reviewing SIINC. How SIINC connects to Procore, Autodesk Forma, BIM 360 and Oracle Aconex, the documents we can share, and the services that process data on our behalf.
SIINC security at a glance
- Encryption
- AES-256 encryption at rest and in transit.
- Independent testing
- SIINC is independently penetration tested.
- SOC 2 Type II and ISO 27001
- Both in progress.
- Uptime
- 99.9% observed average uptime. This is a measured average, not a contractual SLA.
- Tamper-evident records
- A checksum is recorded for every file, and the run history is tamper-evident.
- Audit log
- Every user and admin action is recorded and kept for 12 months.
- Immutable storage
- SIINC works with S3 Object Lock and Azure immutable storage turned on.
- Deleted records
- Records deleted in the source platform stay in your backup for the duration of your plan term.
The access SIINC asks for
Backups read through each platform's official API. Restores write records back into the platform, including into another account, when you run one. The optional Enterprise archive feature brings archived Autodesk projects into backup scope, on request or automatically.
| Platform | What you need to connect |
|---|---|
| Procore | A verified company connection through the SIINC Procore integration, approved by an admin of the Procore account that owns the projects, and an Amazon S3 bucket or Azure Blob container in your own cloud account. SIINC captures what the connected Procore account can see, and nothing more. There is nothing to install, and setup takes under 30 minutes. |
| Autodesk Forma and BIM 360 | Application credentials cover Files. Issues, RFIs and the other modules need user authorisation or a service account with the right project permissions. You also need an Amazon S3 bucket or Azure Blob container in your own cloud account. |
| Oracle Aconex | An Aconex OAuth connection using the user-bound or web-server flow, and an Amazon S3 bucket or Azure Blob container in your own cloud account. SIINC captures what the connected account can see, and nothing more. |
Security documents
- SOC 2 Type II reportAudit in progressIn progress
- ISO 27001 certificateCertification in progressIn progress
- Independent penetration testTested by an independent third party. The report is not published.Completed
Security review questions about SIINC
Security review questions about SIINC
Backups need read access through each platform's official API. Restoring back into a platform needs an account that can write to the project. Each platform page lists exactly what you need to connect.
Not yet. SIINC's SOC 2 Type II and ISO 27001 work is in progress. SIINC is independently penetration tested, and data is encrypted with AES-256 at rest and in transit.
SIINC's observed average uptime is 99.9%. It is a measured average, not a contractual service level agreement.
Email get@siinc.io with the subject Security review and we will send what your review needs.
Request the security pack, or book a call with someone who can answer the technical questions.