Security

How your fleet data is held, seen and kept.

Equipment and site data is operational data. It runs the day. This page states honestly what we store, how we protect it, how long we keep it, and who can see what.

Encryption
In transit + at rest
Access
Role scoped
Retention
Configurable
Posture
Stated, not claimed
What we store

The data that runs the board, nothing more.

Running hours per unit

Hour records against a unit ID. The base signal for the board.

Site and unit metadata

Site names, unit identifiers, unit class, service intervals and load capacity - the reference data.

Service and inspection history

What was done, when, by whom, at what hour mark. Kept alongside the running hour record.

Fuel and consumables

Burn rates and stock records used by the consumables view.

Audit trail

Every edit to a record, with the actor role, timestamp and old value. Non deletable.

Access log

Who viewed a record, when, from which role. Exportable on request.

Encryption

In transit and at rest, unconditionally.

In transit

All connections between your browser or a site device and Harvinfra services are TLS 1.2 or higher. Weak ciphers are not accepted. HSTS is enforced.

At rest

Records and backups are encrypted at rest with industry standard symmetric encryption. Keys are managed and rotated on a schedule - not stored beside the data they protect.

Access model

Role scoped, per site and per fleet.

Site supervisor
Their site

Reads and writes only for equipment currently deployed at their site. Cannot see units on other sites.

Fleet manager
Whole fleet

Reads for every unit and every site. Approves reallocation, service scheduling and compliance exports.

Company admin
Whole account

Manages roles, integrations and export permissions. Does not read operational data by default.

Retention

Kept as long as it is useful. Deleted when it is not.

Operational data
Life of the account

Running hours, service history and inspection records are held for the life of the account. They are what the audit trail rests on.

Access logs
24 months rolling

Who viewed or edited what, kept on a rolling 24 month window. Exported on request before the window closes.

Deletion on request
Within 30 days

A verified account deletion request removes operational data inside 30 days. Backups are purged on their own rotation shortly after.

Compliance posture

Stated in plain terms.

Harvinfra runs its stack on established cloud infrastructure and follows the security controls that infrastructure inherits. We are direct about what we can claim ourselves and what we lean on the underlying platform for. Where a formal certification is not yet in place under our own name, we do not claim it.

Prospective customers on the Enterprise tier can request our current posture document and a walkthrough of the access model as part of the procurement process.

Build your board

Tell us the shape of your fleet. Watch the board light up.

Pick the equipment you actually run. Set a rough count. The board rebuilds live at your scale, with an illustrative mix of healthy, watch and service due units - and a sample reallocation suggestion.

Equipment types
Rough count
24units
650100150

An illustrative view based on typical patterns - not a live read of your actual fleet. Real data appears once your equipment is connected.

Illustrative board at 24 units
Simulated
Crane #01
Sector 1 - active
Healthy
Hours this month
60/ 500h
12%
Crane #02
Sector 2 - active
Healthy
Hours this month
270/ 500h
54%
Crane #03
Sector 3 - active
Healthy
Hours this month
60/ 500h
12%
Crane #04
Sector 4 - active
Healthy
Hours this month
270/ 500h
54%
Crane #05
Yard - active
Healthy
Hours this month
60/ 500h
12%
Crane #06
Sector 1 - active
Healthy
Hours this month
270/ 500h
54%
Board rebuilds as you change the mixBoard scale 1 : 4