A subcontractor compliance platform for NZ builders and property managers. It doesn't just store certificates, it continuously computes whether a contractor is compliant under the Health and Safety at Work Act, and controls site access in real time.
Under the Health and Safety at Work Act, a main contractor is responsible for everyone on their site. But a subcontractor's compliance isn't a fixed fact, it's a state that changes every day: an insurance policy lapses, a Site Safe passport expires, a health and safety plan goes out of date. A folder full of PDFs collected at the start of a job tells you nothing about today.
The hard part isn't storing documents. It's answering one question reliably, on demand, for every contractor and every worker: "Are they safe to be here right now, and can I prove it?" TrustPoint was built to answer exactly that.
TrustPoint isn't a document store with a nice front end. Several deliberate design decisions make it genuinely trustworthy as a system of record.
No one ever clicks "mark as compliant". The engine derives each contractor's state — Ready, At Risk, Restricted or Blocked — live from their actual evidence, expiry dates and the requirements that specific principal has set. Change a date, and the state recalculates itself.
Every significant event is written to an append-only log where each entry carries a SHA-256 hash of the one before it. Alter or delete a record and the chain breaks visibly. If WorkSafe asks you to prove what you knew and when, the history can't have been quietly rewritten.
Documents are cross-checked in real time against the NZBN, Licensed Building Practitioner and Insolvency registers through the official MBIE APIs, so a claimed licence or company status is verified at source, not just taken on trust from an uploaded PDF.
Each site has a QR code. A worker scans, verifies their phone by one-time code, and the gate recomputes their company's readiness on the spot — admitting, restricting or denying entry and writing an induction record. It even works offline, with a cryptographic seal verified on sync.
Approved documents are never edited in place. A renewal creates a new record that supersedes the old one, preserving the full history. The evidentiary value of the original is never lost or overwritten.
When a certificate is uploaded, AI extracts the policy limits, dates and details automatically and presents them with a confidence score. The contractor confirms; nothing sensitive is auto-trusted. It removes the data entry without removing the human judgement.
The fastest way to understand TrustPoint is the no-login demo: six guided scenarios drawn from real builder situations, each walking you through the product step by step.
TrustPoint went from idea to a live, security-audited platform. If your business needs real software, not a brochure, let's talk.
Start a project