Report Studio — Security

Deployment and data handling.

Where your boring logs and reports live is a deployment decision you make — including options that keep everything inside your own boundary.

Built to SOC 2 controlsSSO via OIDC & SAMLRole-based access controlSaaS, your own cloud, or on-premises (by arrangement)

Deployment options

OptionWhere your documents liveWhat leaves your boundary
SaaSYour organization's tenant, hosted by CivilnexScanned log images, supporting-document text, and verified boring data go to our AI model provider; project location goes to ASCE 7 and USDA for live lookups.
Your own cloudA cloud account you controlSame as SaaS.
On-premises (by arrangement)Your infrastructureDocuments stay in your environment. AI model and live-data connections are scoped with you at onboarding.

Security controls

Built to SOC 2 controls. Encrypted at rest with AES-256 and in transit with TLS. Security questionnaires are available on request at info@civilnex.com.

Data handling

Report Studio stores the documents you upload (boring logs, lab reports, supporting documents, standards documents), the parsed fields extracted from them, your firm profile, and the drafts built on top. Where all of it lives depends on the deployment option above — in your own environment under on-premises and your-own-cloud deployments. Your documents, parsed fields, firm profile, and drafts belong to your firm. On request we export them in standard formats and delete them from our systems.

Access control

The platform is multi-tenant: every organization is its own tenant with role-based access control. Admins control who can do what, member by member.

SSO

Single sign-on via OIDC and SAML, so Report Studio sits behind your firm's existing identity provider rather than a separate password list.

AI models and your data

AI model: a large language model (LLM), used through a provider's API. It reads scanned logs, supporting documents, and header fields, and it writes the site narrative from your verified data, through a single gateway. It never computes an engineering value. Your boring logs and reports aren't used to train third-party or shared models.

Now onboarding pilot firms

Bring your template. We draft your first reports with you.

Pilot firms get hands-on onboarding — we set up your firm profile, load your report template, and run your first project through together.

Apply for the pilot