Real security, not security theater
We protect employee review data with multi-factor authentication, full audit logging, database-level tenant isolation, US-based infrastructure, and drafting that retains nothing. These are not checkboxes on a marketing page. They are the actual controls running underneath every review your team does.
Field service companies are increasingly asked for security documentation by general contractors, insurance carriers, and enterprise clients. Most review tools either skip real security or charge enterprise prices for it. FieldCon gives you a straight answer to the question your customers are starting to ask.
How does FieldCon control who gets in?
Owners, admins, and managers sign in with multi-factor authentication using TOTP, the standard authenticator-app approach. Enforcement is flexible, so you can run a standard mode or a strict mode depending on how tightly you need to lock things down. A leaked password alone does not open the door.
How does FieldCon keep my company's data separate?
Every table in the database uses row-level security. That means tenant isolation is enforced at the database level, not bolted on in application code, where one bug can leak data across companies. Your data is structurally separated from every other company's data, by default, at the lowest level.
What gets recorded?
FieldCon keeps a full audit log across every tracked action, including:
- Logins
- Reviews signed
- Settings changed
So when there is a question about who did what and when, you have a record. An audit trail matters for compliance, for disputes, and for the basic protection of knowing what happened in your account.
Where does my data live, and what happens to it?
Your data stays in the platform's US-based infrastructure. Nothing is quietly shipped offshore.
Drafting runs on zero-data-retention APIs. Our drafting provider stores nothing and uses nothing for training. Your assessment data and review transcripts are processed to do their job and then gone, not held and not fed into a model. For the full list of the service providers FieldCon uses and the data each one handles, see the subprocessors page.
Why this matters for field teams
Performance review data is some of the most sensitive information a company holds. It is ratings, gaps, conversations, and goals tied to real people. When a general contractor or insurer asks how you protect it, the answer cannot be a shrug. With FieldCon, you can name the controls: MFA, audit logging, row-level isolation, US-based hosting, and drafting that retains nothing.
The bottom line
Your employee data is protected like it matters, because it does. Multi-factor authentication, full audit logging, database-level isolation, US-based infrastructure, and zero-data-retention drafting give you real protection and a real answer when someone asks how you keep employee data safe.