🔒 Information Security

Your farm's data — what was planted, how much was harvested, how much was spent, who did each operation — is strategic information for your business. This page explains, plainly, how upCampo protects that data and what you can check for yourself at any time.

🔐 Your data is encrypted in transit and at rest

All communication between your browser and upCampo is encrypted with HTTPS/TLS, the same standard banks use. Anyone on the same network as you — at the farm office, in a hotel, at an airport — cannot read what is being transmitted.

Stored data is also encrypted, including backups.


👤 Each person sees only what they need to see

Access in upCampo is individual and detailed: for each user you define, screen by screen, whether they can view, add, edit or delete. The field recorder does not need to see costs; the agronomist does not need to touch invoices.

You are the one in control. Each farm has an administrator user who adds, changes and removes your team's access, without depending on upCampo.


📋 You can view and export the access log

upCampo logs access and the actions taken in the system: who signed in, when, on which screen, what they did and whether the operation succeeded. The sign-in record also stores the source address and approximate location.

This log is not kept just for us: there is a screen in the web portal where you choose the period, filter by user or by screen and export everything to Excel. If you ever need to know who changed a given entry, or show it to an auditor, the information is yours and just a few clicks away.

Records are kept for more than 180 days.


✍️ Access justification, whenever you want it

Farms that work with outside consultants or receive technical support can require the person to write the reason for access when signing in. The justification is recorded along with the access.

It is optional and configurable: you turn it on for the farm and choose which users it applies to. Contact support to enable it.


🛡️ Automatic monitoring

The platform continuously checks the logs for signs of trouble — for example, a series of wrong-password attempts on the same user, or access coming from an unusual country. When something like that shows up, an alert is generated and analyzed.


💾 Backup and recovery

The database has continuous backup, with the ability to restore to a specific point in time. In practice: if something is lost, the data can be returned to its state at a given time, not just to the last overnight backup.

The ability to restore is tested periodically — a backup that has never been restored is a promise, not a guarantee.


⚖️ LGPD and privacy

upCampo complies with Brazil's General Data Protection Law (LGPD, Law 13,709/2018) and has an appointed Data Protection Officer, whose contact is published in the Privacy Policy.

The data you enter in the platform is yours. upCampo does not use it for any purpose other than providing the contracted service, and at the end of the contract it is returned or deleted.


📄 Available documentation

upCampo maintains the following formal documents, available on request to customers and to IT teams evaluating vendors:

  • Information Security Policy
  • Security Incident Response Plan
  • Record of personal data processing activities

Requests can be made through the support channels or directly to the Data Protection Officer.


🚨 Noticed something odd? Let us know

If you suspect unauthorized access to your account, receive a strange message in upCampo's name or spot any security flaw, contact support immediately. The sooner we know, the faster we can act.

✅ In summary:
  • Encrypted communication and storage
  • Individual permissions by screen and by operation, controlled by you
  • Log of access and actions, viewable and exportable by the customer
  • Configurable access justification for consultants and support
  • Automatic monitoring of suspicious events
  • Continuous backup with tested restore
  • LGPD compliance, with an appointed Data Protection Officer

❓ Frequently asked questions

How do I know who accessed the system and what they did?

Through the access log, right in the web portal. You choose the period, filter by user, screen or action, and export the result to Excel. Each record includes date and time, user, screen, operation and result.

How long are access records kept?

For more than 180 days. If you need a longer history for a specific requirement, contact support.

Can other customers see my farm's data?

No. Each company and farm has its data isolated by access permission, and users only see the units their own company's administrator has linked them to.

Can I require a consultant to justify their access?

Yes. The justification requirement is configurable by farm and by user: anyone flagged must write the reason for access when signing in, and the text is recorded along with the access. Contact support to enable it.

Does upCampo use my farm's data for anything else?

No. The data is used exclusively to provide the contracted service, as set out in the contract, and when the relationship ends it is returned or deleted.

How do I request the Information Security Policy?

Through the support channels or directly from the Data Protection Officer, whose contact is in the Privacy Policy. The document is sent to customers and to IT teams evaluating upCampo as a vendor.