Security & data ownership
Your crew’s records deserve careful handling.
How LittleRivet is designed to protect your crew's records. We update this page as the service grows.
Company access
Each company's records are kept separate. Every request for a record or file is checked against the company it belongs to, and we test that one company can't reach another's.
Who can see records
Your company's managers, and Mike, who sets up and supports your account during the pilot. Workers see only their own checklist.
Private files
Card photos are kept in private storage, never at a public web address. When someone opens one, the link works for five minutes.
Personal worker links
Each worker's link opens only their own checklist. Links expire after 30 days and can be switched off at any time. We never store the link itself, only a scrambled version that can't be used to open it.
Workers should keep their links private and ask their office for help if a link stops working.
A record of every approval
LittleRivet records who approved or rejected each card, and when. A new upload stays pending until a manager reviews it.
Approval is your company's check of the document and its details. LittleRivet doesn't contact issuers.
What we don't collect
We don't ask for Social Security numbers, birth dates or home addresses. Some cards show a birth date; we keep the card image exactly as it is.
Keeping your records
Your records stay yours. During the pilot you get every collected card and packet. Contact Mike about access, export or deletion requests. Retention and deletion details will be in the privacy policy before real worker data is collected.
Questions or a security concern?
Contact Mike at:
We don't load real worker records into LittleRivet until our pre-launch security checks pass and the privacy policy is published.