Security & data isolation
Norwon is built multi-tenant from the ground up, with strict data isolation, role-based access and authenticated integrations.
Strict tenant isolation
Each organization's data is walled off at the data layer — not just hidden in the interface — so teams never see each other's visits.
Role-based access
Fine-grained roles for office, field and admin, with per-user permission toggles enforced on every action.
Auditable records
Submissions lock, and the visit lifecycle is timestamped, giving you a defensible trail for every assessment.
Authenticated integrations
API access is key-based and scoped per organization; signed webhooks let you verify every event.
Signed documents
E-signature runs through DocuSign, with completed documents hashed and stored against the assessment.
Canadian data context
Built for Canadian operations, with province-aware handling across the platform.
Security specifics evolve as the platform does. For current details, a security overview, or to discuss your organization's requirements, get in touch with our team.
Frequently asked questions
How is our data kept separate from other teams?
Norwon is multi-tenant by design, with strict data isolation enforced at the data layer — not just hidden in the interface — so one organization's teams never see another's visits.
Who can access our data?
Only the people you grant access to. Fine-grained, role-based permissions for office, field and admin are enforced on every action, with per-user toggles.
Is there an audit trail?
Yes. Submissions lock and the visit lifecycle is timestamped, giving you a defensible record of what happened and when for every assessment.
How are integrations secured?
API access is key-based and scoped per organization, and every webhook event is signed so you can verify it genuinely came from Norwon.
Does e-signature meet legal requirements?
Signatures run through DocuSign, a standard for legally binding e-signature, and completed documents are hashed and stored against the assessment.
Questions about security?
Talk to our team about data isolation, access control and your organization's requirements.