Security

How we look after your data.

CivicPilot runs on your computer. Your saved sites stay there, and each lookup goes only to the planning service that answers it.

Where your data goes.

The sites you look up can reveal your acquisition pipeline, so they go nowhere they don’t need to.

Saved sites: Stored on your own computer. They leave it only when you export or share a report.
Parcel coordinates: Sent over HTTPS to the planning service of the state or territory the parcel is in, and nowhere else.
Address searches: Sent over HTTPS to Mapbox to find the address. Mapbox never receives your name or account.
Analytics and telemetry: None. The app has no analytics, no tracking and no third-party beacons.
Card details: Handled by our payment provider. We never see or store your full card number.

The desktop app follows every Electron security recommendation. These settings are in the shipping build, version 3.0.0.

Isolated renderer: Context isolation and the renderer sandbox are on, and Node.js is switched off in every window, worker and frame.
Allowlisted network: A content security policy set at the session lets the app reach only the planning authorities and map services it needs.
Locked navigation: The app only navigates to its own pages. Every other link opens in your browser, and pop-up windows and embedded web views are refused.
No device permissions: Requests for the camera, microphone and location are refused by default.
No secret keys: The app ships with a public, restricted map token only. A test fails the build if a secret key ever appears.
Safe handling of council data: Text from government and council services is always rendered as text, never as markup, so a stray character can’t run code.

Said plainly, so you know before you install.

Signed installers: The macOS and Windows installers aren’t code-signed yet, so your computer may warn you the first time you open the app. Signing and notarisation come before general release.
Account hosting: We’ll publish where account and billing data is hosted before accounts go live.
Reporting a problem: Email security@civicpilot.com.au with what you found and how to reproduce it. Please give us a chance to fix it before you publish.