Privacy Policy

This Privacy Policy describes how SHIFT7 collects, uses, stores, and protects information in connection with its software products. These include 1173, 119, Radar, RegTrax, and Five Questions. This policy applies to each product when you use it. By using SHIFT7 services, you acknowledge the practices described below.

We only use your information to help you use SHIFT7 products. We do not sell your information. We do not share it with advertisers, data brokers, or other unrelated parties.

Last Updated: October 5, 2026

Organization and Multi-Tenant Isolation

SHIFT7 is designed to keep customer records isolated by organization. Access to customer data is evaluated in the context of the requesting user's organization before records are returned or modified. Information belonging to one organization is not made available to other customer organizations through SHIFT7's ordinary access controls.

Information We Collect

We collect information needed to operate and support SHIFT7 products:

• RegTrax and product communications: RegTrax at regtrax.shift7.app asks for your name, company, and email before it opens. We save those details with the date and time you signed up. We also collect email addresses when you ask to receive SHIFT7 product updates.
• Five Questions: Five Questions at 5questions.shift7.app asks for your first name, last name, and email before the guide opens. We also receive your browser's user agent, which shows the browser and device type. When you save a call, we receive the job you described, your answers to each question, where you stopped, the outcome, and any note you typed. Each record is saved with the date and time.
• Walkthrough form: When you book a walkthrough on shift7.app, we receive your name, email, firm, and any message you add. We email those details to SHIFT7 and keep them on file so we can respond to you. We never sell or share them.
• Radar: Client and prospect records your firm enters into Radar. This can include client names, site details, and labels for what each site is regulated by and what your firm has sold or wants to sell. Radar also stores the draft messages it prepares for you.
• 119: Client records, audit answers, findings, actions, and issued reports for the process safety audits your firm runs in 119. Archive keeps the last two Formal reports for each client.
• Account information: Name, work email address, and organization affiliation, and other details you provide during onboarding or account administration.
• Compliance and program records: Information and documents you or your organization enter or upload in connection with 1173 workflows for pipeline safety management systems, such as program records, assessments, policies, procedures, and related evidence.
• Linked cloud documents: When you optionally connect documents from Google Drive or OneDrive, SHIFT7 stores link metadata and associations to your program records. File content remains in your cloud storage unless you separately upload a copy into SHIFT7.
• Authentication: SHIFT7 may use passwordless or magic-link style authentication. Related tokens and session data are processed to authenticate and maintain secure access.
• Audit logging: SHIFT7 may maintain logs of user actions for security, support, and compliance purposes, which can include identifiers, timestamps, and action context.

Browser storage

Some products save small notes in your browser's local storage. RegTrax saves a flag that shows you already signed up, so the sign-up form does not appear again. Five Questions saves your name and email so you do not have to type them each time. You can clear these at any time by clearing your browser's site data.

How We Use Your Information

We only use your information to help you and your firm use SHIFT7 products. That means operating the tools, recording who signed in or saved a call when a product asks for it, sending product updates you asked for, and keeping the service secure. We do not sell email addresses, compliance data, client records, audit records, Five Questions answers, or any other information you provide.

Information collected on SHIFT7 is used to:

• RegTrax and product updates: If you provide an email address in connection with RegTrax or product interest, we may use it to send SHIFT7 product updates and related product communications. We do not sell your email address to third-party advertisers, data brokers, or marketers.
• Provide and operate 1173, including contractor-topic, maturity, and gap-related tooling.
• Provide and operate RegTrax, which aggregates publicly available regulatory information from sources such as EPA, OSHA, PHMSA, and FERC. RegTrax pulls these updates from the Federal Register.
• Provide and operate Five Questions. We use your name and email to record who ran the guide. We use saved calls to keep a record of what was checked and where work stopped.
• Provide and operate Radar. Radar uses your client records and RegTrax notices to build a weekly list of who to contact and to draft messages. You edit and send every message yourself. SHIFT7 never sends anything for you.
• Provide and operate 119, including audit questions, actions, reports, and Archive.
• Display and open user-linked Google Drive or OneDrive documents for authorized users within your organization context.
• Provide technical support and maintain security of the service.

Security and Storage Controls

SHIFT7 applies administrative and technical safeguards appropriate to the nature of the service, including:

• Encryption in transit: Web traffic is protected with industry-standard encryption in transit (HTTPS/TLS).
• Encryption at rest: SHIFT7 data stores and uploaded file attachments are protected with industry-standard encryption at rest where applicable.
• Access controls: Role-based access controls restrict visibility and actions according to organization context and assigned permissions.

Third-Party Sharing

We do not sell your information. We do not share your information for advertising or marketing by other companies. The only sharing that happens is what is required to run the product for you: secure cloud hosting, authentication email, and the tools that store your records. We do not share contractor or customer compliance records with pipeline operators or other third parties unless an authorized user of your organization initiates an export, report, or similar action.

Third-party cloud storage you connect

When you link a Google Drive or OneDrive document, you direct SHIFT7 to reference content you control in that provider. Access depends on permissions you set. SHIFT7 does not sell linked document content. SHIFT7 is not responsible for the privacy practices of Google or Microsoft.

Google for RegTrax and Five Questions

RegTrax sign-ups and Five Questions sign-ins and saved calls are stored with Google in files that SHIFT7 controls. Google processes this data under its own terms. SHIFT7 is not responsible for the privacy practices of Google.

Contact

If you have questions about this Privacy Policy, your organization's data isolation, or email preference updates, contact us at privacy@shift7.app.