Organization boundaries
Users should see records only for organizations they are authorized to access. Membership and role checks are applied at the workspace level.
RURALREADY TRUST CENTER
Security built around responsibility.
RuralReady handles operational records that matter. Our approach starts with limited collection, organization-separated access and honest security claims.
Launch review noticeNo security program can eliminate every risk. RuralReady documents its current approach without claiming certifications it has not earned.
Role-based access
Owners and leaders assign roles appropriate to the work. Chief, officer, member, manager and staff access should not be treated as interchangeable.
Protected connections
RuralReady is served over HTTPS so supported browsers can encrypt information while it travels between the device and the service.
Private operations app
The public marketing site is separate from the operational workspace. Access to private records requires an authorized account and session.
Offline awareness
Offline data on a phone, tablet or computer can remain accessible to anyone who controls that unlocked device. Organizations must use device locks and remove lost-device access promptly.
Security reporting
Suspected unauthorized access, lost devices or exposed credentials should be reported immediately so the organization and RuralReady can respond.
Verified account email
The email used to create an organization comes from the secure sign-in session. Customers can choose any email they own by signing in with that address.
Protected uploads
Uploads are organization-scoped, size-limited and restricted to approved photo and video formats. File contents are checked before storage.
What organization leaders must do
- Invite only people who need access and review the member list regularly.
- Use a unique password and protect the email account used for recovery.
- Lock every field device and keep its browser and operating system updated.
- Remove departed users, shared devices and lost devices without delay.
- Avoid storing Social Security numbers, complete payment-card data, criminal-justice information or unnecessary medical information.
- Verify that offline changes have synchronized before treating the central record as current.
Certifications and regulated data
RuralReady is not currently represented as SOC 2, ISO 27001, CJIS, HIPAA or PCI DSS certified. Fire organizations must not use the Service to store criminal-justice information, protected health information, patient-care records or payment-card data. The platform is an operations and readiness tool, not an ePCR or law-enforcement records system.
Report a concern
Email homengraphicdesigns@gmail.com with “RuralReady security report” in the subject. Do not include passwords or sensitive record contents in the email.