Enterprise security
Trusted with the projects that shape cities.
Your data never trains a shared model. Copilot inherits only the permissions of the person calling it. Nothing more.
01
SOC 2 Type II
Annual audit by an independent third party.
02
ISO 27001
Certified information security management.
03
GDPR & data residency
EU-hosted by default, regional pinning on request.
04
Encryption
AES-256 at rest, TLS 1.3 in transit, KMS-managed keys.
05
Role-based access
Granular permissions, org-wide SSO, SCIM provisioning.
06
Immutable audit logs
Every action, every change, tamper-evident.
Controls, live in-product
Roles, members, prompts, audit.
Every permission, every member and every Copilot prompt lives inside the workspace — not in a spreadsheet.
construct.os / settings / roles
live
22 built-in roles for every seat on a development team.
actual product · v2.0