Your project data, end-to-end encrypted

The content of projects: planning, requests, documents, work reports and conversations. It is encrypted on the computer or the phone before being sent.

The key belongs to each company and is not held on Zetein's servers. It travels protected by each user's credentials. That is why the service provider cannot read the content.

On a project with subcontractors, what is shared is encrypted with keys specific to that project, generated on the companies' devices. If a subcontractor is removed, the project's keys are changed.

To provide the service, some data is not encrypted: the names of projects and of people, email addresses, document names and the text of the notifications that reach the phone.

When a user chooses to email the PDF of a signed work report to the customer, that document passes through the server unencrypted. This is essential in order to attach it, because the recipient has no key. It happens only on the user's express instruction, document by document, and never automatically.

The document is processed in memory while it is sent and no copy is kept. The recipient's address is used only for that sending and is not stored.

Nobody can recover someone else's password, not even Zetein support. Management's password is reset with the company's recovery key, which is shown only once and Zetein does not keep, and with a code sent by email. A project manager's, with a recovery key issued by management. A field worker's, with a new code issued by their project manager.

If management's password and the recovery key are both lost, nobody can open the company key again, and that may make it impossible to recover the data. That is why the recovery key is kept somewhere safe, separate from the password.

• Management: manages users, departments and the subscription.
• Project manager: runs their projects from the office.
• Technical office: works on their project manager's projects.
• Field worker: works from the phone, on the projects assigned to them.

Passwords have at least twelve characters. Sign-up codes are not sent by email: they are handed over in person or by phone. Each project's activity log cannot be changed or deleted.

From the desktop app you can export all projects to a file that can be read outside Zetein, and from the panel you can download a backup.

The legal details are in the privacy policy.