Your Data. Our Responsibility.

Siloed Client Environments on Egnyte

ProCatalyst manages all internal file storage on Egnyte Business, an enterprise content platform built for industries that handle sensitive project data. Every client engagement operates in its own isolated folder structure with granular permission controls. Your project files, BIM models, and documents are never co-mingled with another client's data. Access is restricted to the specific team members assigned to your engagement, enforced by Egnyte's role-based permissions and two-factor authentication. All files are encrypted at rest (AES-256) and in transit (TLS 1.2+). When an engagement ends, your data environment is archived or deleted per your instructions.

Zero Local Storage

No client data is stored on local machines, personal drives, or removable media. All work is performed in cloud-hosted environments with centralized access controls. This eliminates the risk of data loss from hardware theft, device failure, or unauthorized physical access.

Two-Factor Authentication

Every team member with access to client data is required to use two-factor authentication. This applies to all cloud platforms, project management tools, and communication channels used in the engagement.

Encrypted File Transfer

All file transfers between ProCatalyst and client teams occur over encrypted connections. Internal file management runs through Egnyte's encrypted infrastructure. For client-facing collaboration, we work within your existing platforms (BIM360, ACC, Procore, SharePoint, or your preferred project management system) using the security protocols those platforms provide. We do not require you to adopt our tools. We adopt yours.

AI-Powered Email Threat Scanning

All ProCatalyst email accounts are protected by Trustifi, an AI-powered email security platform that provides real-time threat detection across inbound and outbound messages. Trustifi scans for phishing attempts, business email compromise, malware attachments, and social engineering attacks before they reach a team member's inbox. Outbound emails containing sensitive project data are automatically encrypted in transit. The platform runs continuously across all ProCatalyst accounts and is managed centrally by our operations team.

Access Controls and Team Management

Client data access is managed on a need-to-know basis. Only team members actively assigned to your engagement can access your environment. When a team member rotates off a project, their access is revoked immediately. Access logs are maintained and available for review upon request.

Microsoft 365 Security Foundation

ProCatalyst operates on Microsoft 365 Business Premium, which provides enterprise-grade security features including Advanced Threat Protection, data loss prevention policies, and mobile device management. All team communications, file sharing, and collaboration occur within this secured ecosystem.

Client Dashboard Security

The ProCatalyst Dashboard (dashboard.procatalyst.com) provides clients and internal team members with real-time project visibility. The Dashboard implements multiple layers of security:

Authentication: Employee access is managed through Microsoft Entra ID with Single Sign-On (SSO) and multi-factor authentication (MFA). Client accounts use email-based authentication through Clerk, a SOC 2 compliant identity platform. All signups are restricted; client accounts are provisioned manually by ProCatalyst administrators.

Role-Based Access Control: The Dashboard enforces a four-tier permission model that restricts data visibility by user type. Client users can only access data associated with their own projects. No cross-client data visibility is possible. Allocated resource engagements display work categories and team status without exposing billable hour details.

Infrastructure: The Dashboard is hosted on Vercel's global edge network with automatic SSL/TLS certificate management and HTTP Strict Transport Security (HSTS). All API credentials are stored as encrypted environment variables and are never included in client-side code. Security audits confirm zero credential leakage in deployed assets.

Financial Data: ProCatalyst uses Plaid to connect to our business bank account for internal payment reconciliation. Plaid operates in read-only mode with no payment initiation capability. No client financial data is accessed through this integration. Plaid is SOC 2 Type II certified.