Security & Data Protection
Layered controls for uploads, auth, payments, and audit logs (licenses, COAs, FSA filings). Details and walkthrough below.
How your data is used
TCHR operates a managed SaaS portal — one compliance platform we run and maintain, shared with paying subscribers. You get your own workspace; other growers cannot see your records under normal operations.
What stays private to your account
- Documents, FSA/USDA lot forms, business grants, ledger, and waste logs
- Shop orders and subscription status tied to your login
- Downloads, legal hold, and saved exports in Documents — scoped to your user ID on every API call
What we store (with your consent)
- Profile fields you provide for form pre-fill (registration data-storage consent)
- Uploaded files within your storage quota (default 100 MB; legal hold up to that limit)
- Payment facilitation via Stripe — we never store full card numbers
Questions? Contact us · Privacy Policy · Trust & compliance
Video walkthrough
Loading security walkthrough video…
🛡️ ClamAV Protected
Document uploads are scanned for viruses and malware before they are stored.
🔒 HTTPS Enforced
Encrypted connections with automatic certificate renewal and HTTP redirects to HTTPS.
📋 Full Audit Ledger
Significant actions — including subscription checkouts — are recorded in an immutable operations ledger with compliance snapshots where applicable.
🚦 Rate Limited & Authenticated
Public endpoints are rate-limited. Protected routes require signed-in access with hashed passwords.
Document & data protection
- Real-time virus and malware scanning on every upload.
- Document versioning, soft-delete, and legal hold capabilities.
- Compliance snapshots captured at purchase time for hemp sales audit trails.
- Quota enforcement and secure storage with ownership tied to user accounts.
- First-party storage only — no cross-site shared storage or worklets.
Payments & regulatory alignment
Stripe processes payments under PCI-DSS standards. The portal is designed to support crop recordkeeping — FSA lot forms, field logs, and export bundles can be generated with integrity checks.
Questions about our security posture? Contact us · Trust & compliance