FinishLine Security

Security Overview

Protecting customer and project data is a core priority for FinishLine. We use layered safeguards across our application, infrastructure, and operations to help protect your information.

Data Protection

• Encryption in transit via HTTPS/TLS for data moving between your browser and our services.
• Encryption at rest for stored files and application data.
• Access controls designed to limit data access to authorized users and roles.

Authentication and Access Control

• Authenticated access is required to view or modify protected project information.
• Password reset flows use time-limited reset tokens.
• Sensitive third-party tokens used for integrations (such as Procore OAuth) are handled server-side and are not stored in browser localStorage.
• Enterprise archived projects are read-only until restored by authorized users.

Application and Platform Security

• Ongoing maintenance includes dependency and framework updates.
• Code quality checks include static analysis such as linting and type checks.
• Operational logs and error signals are reviewed to detect reliability or security issues.

Third-Party Services

FinishLine integrates with trusted third-party providers to deliver billing, email, and project integration features. These may include Stripe, Resend, and Procore.

Third-party services are governed by their own terms and privacy/security practices. We recommend reviewing those policies as part of your vendor due diligence process.

Incident Response

If we detect a security incident, we work to contain, investigate, and remediate the issue promptly. We will communicate material incidents to affected customers as appropriate and in accordance with applicable obligations.

Customer Best Practices

• Use strong, unique passwords for your FinishLine account.
• Limit project access to users who require it for their role.
• Review and remove inactive users from active projects.
• Report suspected account misuse immediately.

Related Policies

Contact

If you have security questions or need to report a security concern, contact:

support@finishline.build

FinishLine Technologies