Security and trust

Cadence holds scheduling, identity, and payment records for public safety agencies. Here is how that information is protected.

Encryption

All traffic runs over HTTPS with modern TLS. Data at rest, including uploaded verification documents and support attachments, is encrypted by our hosting provider.

Two-step sign-in

Any user can protect their account with an authenticator app, and an agency can require it for everyone on its roster. Backup codes cover a lost phone, and agency admins can reset a member's second step.

Access controls

Every record is scoped to the agency that owns it and enforced in the database itself, not just in the app. Agencies define their own named roles with specific permissions, so coordinators, supervisors, and billing staff see only what their job requires.

Invite-only membership

Creating an account gives no access to any agency data. Officers and businesses join through a unique, expiring, revocable invite or an admin approval, and agencies can turn open signup codes off entirely.

Audit logging

Approvals, role and permission changes, job edits and deletions, timesheet decisions, invite activity, API key activity, and support access are recorded with who did it and when. Sign-ins, failed attempts, and two-step changes are kept in a separate security activity log.

Session protection

Inactive sessions sign out automatically on a schedule each agency sets. Members can see where they are signed in and sign out everywhere at once. Repeated failed sign-ins are throttled and temporarily locked.

Vendor support access

When the Cadence team needs to troubleshoot inside an agency, access requires a stated reason, expires after four hours, is excluded from agency reporting, and is written to the audit log.

Payments

Card details never touch Cadence servers. Payments and payouts run through Stripe, a PCI Service Provider Level 1 processor, and we store only the references Stripe returns.

Data ownership and retention

Agency data belongs to the agency. Records are retained for the life of the account, and an agency can request an export or deletion of its data at any time.

Reporting a problem

Found something that looks wrong? Email security@cadencepublicsafety.com or call 650-488-1709 and we will respond within one business day.

Questions from a procurement or IT review? Contact us and we will walk your team through it.