How FieldCon Protects Your Employee Data
FieldCon protects employee review data with multi-factor authentication for owners, admins, and managers, full audit logging across every tracked action, and row-level security on every table so each company's data is isolated at the database level. Data stays in US-based infrastructure, and AI processing runs on zero-data-retention APIs, so nothing is stored by the AI provider and nothing is used for training. When a general contractor or insurer asks how you protect employee data, you have a real answer.
Real security, not security theater
We protect employee review data with multi-factor authentication, full audit logging, database-level tenant isolation, US-based infrastructure, and AI that retains nothing. These are not checkboxes on a marketing page. They are the actual controls running underneath every review your team does.
Field service companies are increasingly asked for security documentation by general contractors, insurance carriers, and enterprise clients. Most review tools either skip real security or charge enterprise prices for it. FieldCon gives you a straight answer to the question your customers are starting to ask.
How does FieldCon control who gets in?
Owners, admins, and managers sign in with multi-factor authentication using TOTP, the standard authenticator-app approach. Enforcement is flexible, so you can run a standard mode or a strict mode depending on how tightly you need to lock things down. A leaked password alone does not open the door.
How does FieldCon keep my company's data separate?
Every table in the database uses row-level security. That means tenant isolation is enforced at the database level, not bolted on in application code where a bug could leak across companies. Your data is structurally separated from every other company's data, by default, at the lowest level.
What gets recorded?
FieldCon keeps a full audit log across every tracked action, including:
- Logins
- Reviews signed
- Settings changed
So when there is a question about who did what and when, you have a record. An audit trail matters for compliance, for disputes, and for the basic protection of knowing what happened in your account.
Where does my data live, and what happens with the AI?
Your data stays in the platform's US-based infrastructure. Nothing is quietly shipped offshore.
AI processing runs on zero-data-retention APIs. The AI provider stores nothing and uses nothing for training. Your assessment data and review transcripts are processed to do their job and then gone, not held and not fed into a model. For the full list of the service providers FieldCon uses and the data each one handles, see the subprocessors page.
Why this matters for field teams
Performance review data is some of the most sensitive information a company holds. It is ratings, gaps, conversations, and goals tied to real people. When a general contractor or insurer asks how you protect it, the answer cannot be a shrug. With FieldCon, you can name the controls: MFA, audit logging, row-level isolation, US-based hosting, and AI that retains nothing.
The bottom line
Your employee data is protected like it matters, because it does. Multi-factor authentication, full audit logging, database-level isolation, US-based infrastructure, and zero-data-retention AI give you real protection and a real answer when someone asks how you keep employee data safe.
Frequently asked questions
How does FieldCon keep one company's data separate from another's?
Every table uses row-level security, so tenant isolation is enforced at the database level rather than left to application code. One company's data is structurally separated from another's, not just hidden by the interface.
Does FieldCon use my employee data to train AI?
No. AI processing runs on zero-data-retention APIs, which means the AI provider stores nothing and uses nothing for training. Your assessment data and review transcripts are processed and then gone, not retained.
What do I tell a general contractor or insurer who asks how we protect employee data?
You can point them to specifics. FieldCon enforces multi-factor authentication for owners, admins, and managers, logs every tracked action for an audit trail, isolates each company's data at the database level with row-level security, keeps data in US-based infrastructure, and runs AI on zero-data-retention APIs. For the full list of service providers and the data each one handles, you can share the subprocessors page.