Platform
Design decisions, stated plainly.
What follows are architectural properties of the platform, described as the design decisions they are. Where a claim would need an external attestation, this page does not make one.
Sessions live on the server
The browser holds only an opaque token. The server re-establishes who you are on every request.
- Revoking an account takes effect on the next request, not whenever a cached claim expires.
- Signing out ends the session server-side rather than discarding a token the client was trusting.
Access is bounded by company grant
Which wells and facilities anyone can see is bounded by their company explicit grants.
- Grants are explicit. Nothing is visible by default.
- Scoping applies to every surface, including exports and the mobile experience.
- A pumper device only ever holds the assets that pumper is granted.
Identity is stored separately
Identity lives in a different database from operational data, and no query joins across the two.
- Operational data and account data are not co-resident.
- The separation is structural rather than a convention the application is trusted to follow.
Control authority is its own grant
Seeing an asset and commanding it are separate permissions, scoped per device group.
- A user with full visibility may hold no command rights at all.
- Every command requires explicit confirmation and produces an append-only audit entry.
- Audit entries cannot be edited or removed.
It fails closed
A failure produces an error, not a fallback.
- A failed connection, schema, permission or query returns an error and says so.
- Sample data is never substituted for unavailable real data.
- Stale values are never presented as current.
Read-only to your system of record
The connection to your production accounting system is least-privilege and restricted to SELECT.
- The platform does not write to your system of record.
- Field input recorded in the platform is stored in the platform own database.
- The credential used for the accounting connection does not carry write rights.
What this page deliberately does not claim
Security pages in this market tend to accumulate badges. This one does not display certifications the company does not hold, and it does not describe architectural choices in language borrowed from a compliance framework in order to imply an audit that has not happened.
What is above are design decisions. They are checkable: you can ask how sessions are validated, what the accounting connection credential is permitted to do, and what happens to a control command in the audit log. Those questions have specific answers, and an evaluator is welcome to ask them.
The read-only wording, precisely
The platform accepts input. Gauges, hauls and corrections are recorded by people in the field and stored in the platform own database. What it does not do is write to your system of record.
“Read-only to your system of record” is therefore the accurate claim, and the stronger-sounding version — that the software accepts no input at all — is not true and is not made anywhere on this site.
Common questions
Do you hold a SOC 2 report or an ISO 27001 certificate?
This page describes architectural properties, not audited attestations, and the platform does not display certification badges it does not hold. If a formal attestation is a requirement for your procurement process, raise it with us directly and we will tell you exactly where things stand.
Can operational data stay inside our own network?
Yes. Customer-hosted deployment exists for that requirement. Both deployment options run the same platform, and the choice does not reduce the feature set.
What does the platform connect to in our environment?
A least-privilege, SELECT-only connection to approved fields in your production accounting system, and whatever field connectivity you configure — direct protocol connections or an edge gateway. The architecture reference in the docs describes both.
See it against your own wells.
A demo runs against synthetic data first, then against a read-only connection to your system of record if you want to see real numbers.