ResourcesSecurity & data
Your records, kept safe and kept apart.
How we protect the records you keep in Ecohydro, and who can see them.
What you get
Hosted in the EU
The database and the application run in Frankfurt, Germany. Everything travels over encrypted HTTPS connections.
Organisations kept apart
Each organisation’s records are separated in the database itself, so one organisation’s users can never read another’s.
Sign in without passwords
People sign in with a one-time code sent to their work email, so there is no password to reuse or steal.
Two-factor authentication
An authenticator app is required before anyone invites people, changes roles or manages sensors, with recovery codes for a lost phone.
Four roles
Administrators, compliance managers, engineers and viewers each see and do only what their role allows.
Signed out when idle
A session left idle signs itself out, with a warning first.
Invitation only
Nobody can join an organisation without an invitation from its administrator.
A full audit trail
Changes are logged with who made them and when, and readings are linked into a tamper-evident hash chain.
Daily backups
The database is backed up every day by our hosting provider.
What we collect
Names and work email addresses of the people you invite, and the records your team creates. We don’t track phone locations.
See it with your own buildings.
Send us an outlet list and we’ll show you your sites in Ecohydro, with their checks set up.