The record is the product. So it cannot be editable.
Construway holds the data that decides contracts, measurements and payments. Sign-offs are append-only, every company's data is separated from every other, and administrative roles carry mandatory multi-factor authentication.
Multi-factor authentication enforced for every administrative role
A password alone is not enough for an account that can reach project finances, schedule data and team permissions. Multi-factor authentication is mandatory for the roles that hand out access, and available to every account.
Mandatory for administrative roles
Multi-factor authentication is enforced for the roles that administer access — PMO and Warehouse Manager — and for platform staff. Every other account can enable it from their own profile.
Authenticator-based verification
A short-lived TOTP code from a mobile authenticator app is required in addition to the password. Time-based codes expire in 30 seconds and cannot be reused or intercepted in transit.
Recovery codes at setup
Backup codes are generated during MFA enrollment so account access is never permanently lost if a device is unavailable.
Verified access at every login
Sessions are verified against the second factor at sign-in. A trusted browser can be remembered for seven days; after that, the code is required again.
Your data stays yours — fully separated from every other account
Your company's projects, teams and workflows are visible only to the people you invited. Nothing crosses between accounts — including to us, outside of a support request you open.
Strictly separated by account
Every query is scoped to your organization. No other account on the platform can access your projects, your team, or your data — separation is enforced at the application level on every request.
Project-level roles
Team members are assigned to specific projects with permissions that match their responsibilities. No global access to all company projects.
Module-level access
Within a project, access to cost data, schedules, submittals and material requests can be granted or restricted independently for each role.
Invite-only access
New users can only join through a direct invitation from an existing administrator. There's no open sign-up or self-registration — you control who gets in.
Sign-off that cannot be tampered with — not even by us
Decisions, events and delivery sign-offs are append-only records: once written, they cannot be edited or deleted. That is what turns a contested measurement into a closed question.
Acceptance certificate with a SHA-256 checksum
Every acceptance certificate is issued with a SHA-256 checksum and a version chain. Any later alteration to the document breaks verification — so the copy sitting in your client's hands can be proven to be the one that was signed.
The approval chain recorded as it happens
Each submittal moves through a defined approval workflow, and every review, revision and approval is recorded with the reviewer's identity, the timestamp, and the drawing revision it was made against.
Schedule and material history preserved
Task progress, status changes and the full lifecycle of every material request are timestamped — so you can show how the project actually evolved, not only where it ended up.
Built continuously, not shipped and left
Construway has run in production since 2025 and ships continuously. Schedule, submittals, cost control, drawings and logistics all landed on the same platform, under the same tenant isolation and the same audit rules — not bolted on as separate products. Every release is listed for customers inside the app.
