‹ Ancora

Privacy Notice

What Ancora holds about you, and where it goes.
Effective 2026-10-22
This document has not been reviewed by a lawyer
It is an accurate description of what the software does with data, written from the code. It is not legal advice, and anything still shown as a marked blank is undecided. Do not rely on it in a contract until it has been reviewed.

Who holds your record

Your employer decides what goes into Ancora: who is on the roster, what training is required, and who may see an injury record. They are responsible for that record. Ancora, operated by Ancora Safety Group, stores and processes it on their instructions.

If you want something corrected or want to know what is held about you, ask your employer first — they control it. If that does not get you an answer, write to support@ancorasafety.com.

What is held

Who you are
Name, worker ID, trade, the company and site you are assigned to, date of birth, and an identification number and type where your employer records one.
Injury and illness recordsSENSITIVE
What happened, when, to whom, what care was sought, witness names, photographs of the scene, and the OSHA 300/301 entries built from them.
Medical and return-to-work documentsSENSITIVE
Clearance letters and restrictions your employer uploads after an injury.
A supervisor is shown your RESTRICTIONS — what you may and may not do — and never a diagnosis and never the document itself.
Training and certification
Courses completed, quiz results, certificates, expiry dates, practical evaluations and who performed them.
Where and when you worked
Site check-ins and check-outs, and the hours derived from them.
Exposure monitoringSENSITIVE
Air, noise, bulk and wipe samples taken on you or near you, and the laboratory results.
Kept for a working life and never deleted — that is the point of an exposure record.
Things you send
Messages, toolbox talk attendance, near-miss reports, and reports to the anonymous line.
The anonymous line is anonymous: no name, no worker ID and no device information is attached to it, and your employer cannot see who wrote one.
Sign-in credentials
A hashed PIN or password. The PIN itself is not stored and cannot be recovered, only replaced.

Your medical information

An injury record and a return-to-work document are medical information about you, and the Americans with Disabilities Act treats them that way. Ancora is built to the same rule:

  • A supervisor is shown your restrictions — what you may and may not do — and never a diagnosis, and never the document itself.
  • The documents themselves sit in separate storage that the roster screens cannot read.
  • An injury description is never sent to our error-tracking vendor; it is stripped before it leaves.
  • A report to the anonymous line carries no name, no worker ID and no device information, and your employer cannot find out who wrote it.

Ancora does not sell your information, does not advertise to you, and does not use your records to train anybody’s AI model.

Who else sees it

Your employer may share a limited view with others — a union sees its own members’ training, a general contractor sees aggregate figures for a subcontractor bidding work, an insurance broker sees rates. None of those views carries an individual injury, a finding or a name unless the law requires it, and every one of them is logged.

These companies process data on our behalf so the product can work:

Supabasesupabase.co
The database, the file storage and sign-in.
Everything in this notice is stored here.
Vercelvercel.app
Runs the application.
Requests pass through it; it does not keep a copy of your records.
Anthropicapi.anthropic.com
Reads documents you upload — safety data sheets, training certificates — and answers questions you ask Ancora AI about your own company.
The document or question you submit at that moment. Anthropic does not train on it.
Muxmux.com
Stores and plays training video.
The video, and which worker watched how much of it.
Resendresend.com
Sends email — injury alerts, reminders, the monthly summary.
The recipient address and the message.
Sentrysentry.io
Tells us when the software breaks.
The error and where it happened. Incident descriptions, medical fields, names and credentials are stripped before they leave — see lib/sentryScrub.js.
Twilioapi.twilio.comNOT ENABLED
Sends the urgent text message when somebody is hurt.
The recipient number and the alert. NOT CURRENTLY ENABLED.
OpenStreetMapoverpass-api.de
Finds the nearest hospital with an emergency department to a job site.
The site coordinates. No person is named.
OpenWeatherMapapi.openweathermap.org
The weather on the daily safety brief.
The site coordinates. No person is named.
Procoreapi.procore.comOPTIONAL
Optional. Pushes your incidents into your own Procore project.
Only what you choose to push, and only if you connect it.

How long it is kept

Injury and illness records (OSHA 300, 300A, 301)
Five years following the end of the calendar year they cover.
29 CFR 1904.33, which is your employer’s obligation and continues whether or not they keep using Ancora.
Exposure monitoring records
For the duration of employment plus thirty years.
29 CFR 1910.1020(d)(1)(ii). This is why an exposure sample is never deleted.
Training records and certificates
While the account is open, and then as below.
No single federal period governs these. Where a particular standard sets one for its own training record, that period applies and is your obligation.
Everything else, after an account closes
Ninety days, then deleted.
Except records carrying a federal duty — injury records and exposure monitoring above — which are kept for the period that duty requires and then deleted. Ninety days so a customer who leaves has time to come back for an export.

Some records cannot be deleted on request, and that is deliberate: an exposure sample is your evidence of what you breathed, and an injury record is your employer’s federal obligation. Asking for either to be erased does not remove it.

Changes

If this notice changes in a way that affects what is held or who sees it, the effective date above changes and your employer is told. Questions to support@ancorasafety.com.

Terms of Service · Privacy Notice