Security

Security practices for a native-first workforce product.

ObreroX uses practical access controls, server-side protections, operational logging, and support procedures appropriate for construction workforce operations and the current product stage.

Security overview

Security information is provided for customers, workers, app reviewers, and support teams.

Role-based access

Admin and worker experiences are separated so users only access supported role-appropriate functions.

Server-side controls

Operational data is handled through server-side APIs and controlled application flows.

Tenant and role boundaries

Company-scoped records and management actions are checked against authenticated role and organization context.

Secure video media

WorkChat video is encrypted on the sending device. The relay receives temporary ciphertext and per-recipient wrapped keys, not plaintext media or raw media keys.

Device-held private keys

Each device keeps its X25519 private key in the mobile secure store; only the public key is registered with the service.

Support process

Security, privacy, and account questions can be sent to [email protected] for review and follow-up.