Security and hosting
Your city's reports are public infrastructure. Here is how we keep them safe, available and yours.
One instance per city
Your city never shares a database, a sign-in service or a file store with another city. Each instance runs on its own private network.
Hosted where you need it
Each city's instance runs in the region it chooses - so data stays in the EU, the US or your own country, as your rules require. GDPR is covered for European cities.
Encrypted everywhere
All traffic is served over HTTPS with modern TLS. Certificates are issued and renewed automatically.
No passwords in the app
Sign-in is handled by a dedicated identity service with two-factor and passkeys. The application never sees or stores a password.
Private public map
A pin on the public map carries no identifier and nothing about who reported it. It cannot be traced back to a person.
Nothing exposed
Databases and storage consoles are never reachable from the internet, and every public endpoint is rate-limited against abuse.
Running it, so you don't have to
Daily backups
Database and photos backed up every day, kept for 30 days, restorable on request.
Updates rolled out for you
Security fixes land as soon as they ship; feature releases in announced maintenance windows.
Your data, whenever you want it
A full export of reports, photos and users at any time - and always when you leave.
What runs in your city's instance
Every instance is a complete set of services dedicated to one city: the citizen web app on your domain, the office console for staff, the API the apps and the operator mobile app talk to, an identity service for sign-in, file storage for report and completion photos, and a PostgreSQL database that only the API can reach.
Your own servers
If your city's rules require its data to stay in its own data centre, TaskCivic is also available as a licensed on-premise installation. We install it, and keep supporting and updating it under the same agreement.
Reporting a vulnerability
If you believe you have found a security issue in TaskCivic, please write to security@taskcivic.com. We reply within two business days.