Security & Trust

How we protect engineering data

This page is maintained by the MEP Engg Suite team to answer common security and privacy questions about the platform. It describes current practices; it is not an independent audit or certification.

Access & authentication

Accounts are protected by email/password or Google sign-in. Sessions are issued as short-lived tokens and every protected page verifies the session before rendering. Administrative screens require an explicit admin or owner role held in a dedicated roles table, checked on the server.

Data isolation

Projects and saved calculations are stored in a managed PostgreSQL database with row-level security. Each row is scoped to its owner, so one engineer cannot read another engineer's work. Traffic between your browser and the platform is encrypted with TLS.

What this platform is

MEP Engg Suite is business engineering software. It performs deterministic HVAC and MEP calculations from published standards (ASHRAE, SMACNA, ISO 14644, CTI, IS codes). It is not a general-purpose chatbot, model host or content-generation service, and it does not accept file uploads or execute user-supplied code.

Reporting a vulnerability

Security reports are welcome at mepenggsuite@gmail.com. A machine-readable contact is published at /.well-known/security.txt. We aim to acknowledge reports within a few business days.

Data we collect

Account details you provide (name, email, company, country), the calculations you save, and anonymous page-visit counters used to show platform activity. Optional browser location is used only to display local temperature and humidity and is never stored. We do not sell data or share it with advertisers.

Questions? Support · mepenggsuite@gmail.com