Security & Compliance
Security you can understand and verify
Summit holds sensitive operational and controlled-substance records. Here is how we protect that data, control access, and draw a clear line between what the software does and what remains your agency’s responsibility.
Controls
Protection that is built in
These controls are part of how Summit works, not optional settings someone has to remember to turn on.
Single sign-on
Users sign in through your agency’s identity provider using OIDC. Summit never stores their passwords, and access ends when your directory removes it.
Granular permissions
Build roles from specific permissions, such as viewing stock, adjusting counts, or witnessing narcotics waste. Nothing is granted by default.
Tenant isolation
Every record belongs to a specific agency, with safeguards at both the application and database levels to prevent cross-agency access.
Device-scoped kiosks
A kiosk uses its own device session rather than a person’s credentials. It is limited to its assigned location and approved functions, and a lost tablet can be revoked immediately.
Complete movement history
Every supply movement and narcotics event includes the person, time, and context. Narcotics entries cannot be edited or deleted by the application.
Narcotics stay off shared devices
Controlled-substance actions require an individual login and are never available on shared kiosks, preserving personal accountability.
Roles
Give each person the access their job requires
Create roles that match the way your agency works, from field crews and shift supervisors to logistics and compliance. Assign more than one role when someone has responsibilities across teams.
- Permissions control specific actions, not just pages
- Permissions remain inactive until the related module is enabled
- Roles can be deactivated without erasing their history
- Role-based alerts stay current as staffing changes
Clear expectations
A straightforward partnership
Summit gives your agency flexible controls, dependable records, and clear answers throughout your security review and deployment.
Built around your policies
Summit helps enforce the witness requirements, count intervals, and checkout limits you configure. Your team stays in control of the policy while Summit makes it easier to follow and document consistently.
Security answers you can verify
We’ll share our current third-party audits and attestations, answer your questions directly, and give your reviewers the information they need to evaluate Summit with confidence.
A deployment that fits your needs
We’ll walk through hosting, retention, backups, and data residency with your team so the deployment approach matches your operational and security requirements.
Your records stay portable
Supply history, narcotics events, and rig-check records export to CSV, and DEA worksheets generate as PDFs. Your agency can access and export its records whenever they are needed.
Bring us your security questions early
If your agency or insurer has a review process, send it our way. We’re happy to work through it before you reach the final stages of procurement.