Skip to content

Answers

Is PropelMapper HIPAA or SOC 2 compliant?

No, PropelMapper has no HIPAA compliance claim, SOC 2 report or ISO 27001 certification.

Saved Ridge Field report Activity panel.
Example account: Prairie Agronomy. Activity panel.

PropelMapper is built for field visits to farms, sites and herds. If your organization requires a SOC 2 report, an ISO 27001 certification or a business associate agreement, talk to us before choosing a plan.

Records are hosted in the United States. The database is backed up hourly, and those backups are copied along with your uploaded files to a second US region.

On the phone, the field app keeps your places and captures in an encrypted database so it works without signal. The captures upload to the team when you reconnect.

Every person signs in with their own account, and a team has two roles. Admins manage the member list, invitations, labels and team switches. A member records visits, writes and signs reports and works their own tasks.

What the record shows

Each report keeps an activity log: visit start and end, each capture, every version, the signature, each send and the acknowledgment. Signing freezes a version. A later edit creates a new one, so the signed copy stays readable next to it.

The activity log is a paper trail kept from stored records. Recipients confirm receipt through a link, and only the author signs the report.

Your data and how it leaves

Your team owns its visits, recordings, photos, readings, contacts and reports, and we don't train on your data. Reports export as signed PDFs and Word files, readings as CSV or Excel and contacts as CSV, with no request to us needed.

When someone leaves the team, remove them from the member list. Their visits and reports stay with the team, under the places they belong to. A Delete action asks for confirmation first, and a deleted record cannot be restored from the app. Closing a team account and removing its data goes through us.

Shared links to records outside the team come with paid plans and only exist when someone on the team creates one. Gmail and Outlook connections stay off until a team turns them on, each person connects their own mailbox, and mail access is read-only.

If your review comes with a security questionnaire, book a call and send it over. We would rather answer it before your team starts recording visits.

Last checked: November 6, 2026

What do you write up after a visit?

Pick one and see the signed report PropelMapper drafts for it.