Who can see what, and what happens to a lost phone
Safety records are sensitive. Here is what the system does to protect them, in plain words.
A second step to sign in
Sign-in can ask for a code from an authenticator app as well as the password, with recovery codes in case the phone is lost. Staff of V1 SMS are always asked for it.
A PIN on every phone
After signing in, each person chooses a six-digit PIN. The app locks when it opens, after a minute out of sight, and on request. Five wrong PINs make it wait; ten remove that person from the phone and delete what was kept for them.
Locked on the device
Documents, drafts, photos and messages kept on the phone are locked with a key only the PIN opens. They are deleted when the person signs out. While the app is out of sight a plain cover hides the screen, so the phone’s app switcher shows nothing.
Several people, one phone
Each person who signs in on a shared phone gets a profile of their own, with their own PIN and their own documents. Nobody opens anyone else’s, and removing one person leaves the others.
A lost phone
The administrator can sign a phone out from the website at once. Whoever holds it must sign in again, and can only do so while their role may use the app.
Only what a role may see
People see the documents their roles are given, and never more than they could see on the website. A role that has not been given the app cannot sign in to it.
Passwords
A forgotten password is reset by a link sent to the account’s own address, which works once and lasts an hour. Choosing a new password signs the person out of every phone and browser, and emails them to say so.
A record of what happened
Sign-ins, documents downloaded to a phone, reports sent from the app and notices sent are written to an audit trail that cannot be edited.
What we do not claim. We do not list security certifications we do not hold, and we do not say any system is unbreakable. Ask us about hosting, backups and how data is deleted, and we will answer in writing.
Oversight you can see
Separation of duties
Accepting a risk, signing off a change and closing a finding are done by a different person from the one who prepared them.
Reporter and statement confidentiality
The reporter’s name is kept apart from the report. Who can read an investigation statement is set by role.
AI under your control
The assistant is off until your Administrator switches it on, only suggests, shows its source and has each quotation checked against the page. Each use is recorded as a count, not the words asked. More on the assistant.
Changes on record
Every change to a record is written to an audit trail that cannot be edited.
See V1 SMS with your operation in mind.
Tell us about your organisation and the safety work you want to make easier. We’ll show you the relevant workflows, the assistant and the mobile app.
Book a demonstration