SiteTalk security
Site conversations, photos and documents contain information that matters to your company and its clients. Your company needs to control who can access it, know where it is processed and keep it available as people and projects change.
Your company keeps control of its site information.
SiteTalk brings site communication and documentation together in a service your company controls. This page explains the independent security testing, the changes we made and how SiteTalk processes data when you use AI features.
SECURITY TESTING
Independent security testing of SiteTalk
Independent testing
No critical findings
Issues addressed
Braveson independently tested SiteTalk’s security from 17 March to 13 April 2026.
Braveson reported no critical or high-severity findings.
Braveson Oy, 27 April 2026
The test identified one low-risk finding and three informational findings. We made changes to address the low-risk finding and the informational findings concerning password strength.
SECURITY IN PRACTICE
How we protect site information
Site teams create conversations, photos, documents and decisions every day. SiteTalk keeps those records under company control and available to the people who need them.
We support day-to-day site work with secure data storage, access controls, daily backups and ongoing service maintenance.
Data hosted in Finland
Site conversations, photos, documents and other project data are stored in a cloud environment in Finland.
Controlled access
Project permissions control who can view and work with site information. Your company keeps control of the project record when staff change.
Encryption in transit
Data transferred between the SiteTalk app and its servers is encrypted, whether you work on site or in the office.
Daily backups
We back up SiteTalk data daily so it can be restored if an unexpected disruption occurs.
Ongoing security maintenance
We monitor potential security risks, apply necessary updates and fix identified vulnerabilities as part of ongoing service maintenance.
DATA PROCESSING
AI and data processing
SiteTalk’s AI helps summarise conversations and project content. These features use Google Vertex AI.
Customer content is not used to train AI models.
Project content, files and the database are hosted in Finland. The customer organisation controls access to project content, and SiteTalk processes it according to the organisation’s instructions. Data in transit between the app and the server is encrypted.
When AI features are used, content may also be processed outside the EU and EEA. These transfers are safeguarded by the European Commission’s Standard Contractual Clauses as part of our data processing agreement with Google.
FURTHER INFORMATION
Questions about SiteTalk security?
We can explain which services we use, where we store data and how we protect it. Contact us for further information to support your organisation’s security assessment.
Get in touch
Ari Aarniovuori · +358 40 552 1249 · ari@sitetalk.fi