Security for Contract records

CivLogic supports Contract records, Implementation Schedule preparation, accomplishment reporting, and submission package downloads. Account access, Project records, and payment verification are controlled to protect the data used in Contract preparation and implementation.

Account access

  • Sign-in, sign-up, password reset, and related authentication actions pass through secured server routes, not open browser-to-database password calls.
  • Requests are validated and rate-limited.
  • Error messages remain general where needed to reduce account probing.
  • Authentication forms include a honeypot field to reduce basic bot signups.

Project records in the app

  • Project records, Implementation Schedules, Bill of Quantities, accomplishment records, and Contract Time records are available only through authenticated app access.
  • Variation Order revised Bill of Quantities imports are checked on the server, including comparison against reported accomplishment, before application.

Package payments

  • Submission package downloads use server-side payment orders and verification through HitPay.
  • Download eligibility is checked on the server; the client interface alone cannot unlock a paid package.
  • Payment status for a package target is based on server verification, not a browser-only flag.

Limitations

  • This page describes CivLogic product controls. It is not a third-party audit report.

Create an account to prepare and maintain your Contract records in CivLogic.