The Operating System for Physical Security Companies
Workforce, field operations, compliance, client portal, payroll, communications, and Shield AI in one enterprise platform. Built for security companies, airports, ports, municipalities, and critical infrastructure.
Stack Consolidation
Replace Multiple Tools With One Platform
Most operations run on disconnected systems. Shield Spire Ops unifies workforce, security, HR, billing, compliance, and operations into a single command platform.
Most companies run operations across 12 to 25 disconnected tools without realizing the cost and complexity.
Fragmented Stack
Workforce Operations
HR & Hiring
Finance & Billing
Communication
Analytics & Reporting
Shield Spire OPS
One unified platform
Scheduling & Dispatch
Time & Attendance
HR & Recruitment
CRM & Client Management
Billing & Invoicing
Training & Compliance
Communication
Reporting & Analytics
Guard Tour & Patrols
Incident Reporting
12-25
0
Tools → Platform
$2,500-$8,500+
0
Monthly Cost
15-30
0
Integrations Needed
70-120 hrs
~15 hrs
Admin Hours / Month
All product names, logos, and brands are property of their respective owners and are used for identification purposes only.
The Operational Backbone for Physical Security.
From hiring a guard to passing a compliance audit, every workflow connects through one platform with no data silos.
One System, Not Ten
Workforce, scheduling, GPS time tracking, DARs, incident command, patrol, payroll preparation, invoicing, compliance, client portals, communications, recruitment, and Shield AI. All operating from a single database with shared context across every module.
Multi-Tenant by Architecture
Each security company operates in complete data isolation enforced by 1,265 Row-Level Security policies. Separate Stripe Connect accounts per tenant ensure revenue never co-mingles. A single user can hold roles in multiple tenants.
Multi-Site, Multi-Client Scale
Manage 50 guards across 3 sites or 5,000 officers across 200 locations. The same system scales without schema changes. Assign teams, configure geofences, and enforce compliance per site, per client, per jurisdiction.
End-to-End Operational Pipeline
Every step feeds data forward. No re-entry, no gaps.
Every Role Gets Its Own Dashboard
19 role definitions across 5 portals. Each user sees only the modules, data, and actions their responsibilities require.
Platform Owner
Cross-tenant governance, subscription management, compliance template administration, and context-switch into any tenant with full audit trail.
Administrator
Full CRUD across employees, schedules, sites, clients, invoices, compliance documents, and all 18 admin modules within their tenant.
Supervisor
Shift monitoring, DAR review and approval, incident escalation, dispatch messaging, and real-time team attendance visibility.
Employee / Guard
GPS clock-in, DAR submission, patrol checkpoint scanning, incident reporting, training completion, and open shift pickup. All from mobile.
Client
Coverage dashboards, invoice viewing and Stripe payment, shared document access, and service feedback submission through a branded portal.
Applicant
Application status tracking, interview schedule viewing, document uploads, and profile management through a self-service portal.
70+ Modules. One Platform. Zero Gaps.
Workforce, field ops, compliance, payroll, financials, client management, communications, Shield AI, and API access. Every module shares context and data, eliminating double-entry and data silos.
Workforce Management
- Hire-to-separation tracking with status transitions
- Template-based onboarding with completion gating
- Formal disciplinary records with privacy controls
- Role promotion auto-grants admin dashboard access
Scheduling
- Multi-site weekly builder with license-level validation
- Open shift board for self-service pickup
- Automated FCM reminders 2 hours before start
- No-show and overtime detection with supervisor alerts
Time & Attendance
- Geofence-verified clock-in with mandatory selfie
- GPS coordinates logged on every punch
- Admin review with approve/reject workflow
- Automated timesheet export for payroll integration
Incident & DAR
- Auto-created DAR at clock-in, auto-closed at clock-out
- ICS-style incident command with priority badges
- Photo/video evidence linked to active DAR
- Post-incident response documentation for liability
Dispatch & Messaging
- Priority-based acknowledgment deadlines (5–60 min)
- DM, Group, Site, Shift, and Support thread types
- Automated SLA escalation on missed responses
- Real-time updates via Supabase subscriptions
Guard Tour & Patrol
- NFC/QR checkpoint scanning with sequence tracking
- Missed checkpoint alerts fed into SLA metrics
- Route configuration with compliance verification
- Automated patrol monitoring via edge function
Access Control & Badging
- HID hardware gate scanner with high-throughput detection
- Real-time 'Still On-Site' headcount panel
- Emergency muster with last-known location
- Auto-close sessions at 12-hour threshold
Assets & Maintenance
- Full lifecycle tracking with firmware versioning
- Preventive maintenance scheduling with work orders
- Disaster recovery planning with RTO/RPO tracking
- Calibration scheduling and assignment history
Training & Academy
- Course creation with slides, quizzes, and content
- Training packs with required/optional designations
- Gating rules block deployment until completion
- Platform-level templates, tenant-level customization
Client Portal
- Coverage dashboards with assigned personnel
- Invoice viewing and Stripe payment processing
- Token-based secure invoice access without login
- Available in English and Spanish
Financials
- Quote → Contract → Invoice lifecycle
- Stripe Connect Express for per-tenant revenue isolation
- Configurable retainer and subscription billing
- Reusable proposal templates with public access
Recruitment
- Application tracking from submitted to hired/rejected
- Interview coordination with email notifications
- Applicant self-service portal with document upload
- Candidate profile and saved position management
Compliance
- Jurisdiction-aware document verification rules
- Soft-block restricts dispatching until compliant
- Expiration monitoring at 90/60/30/14/7 day intervals
- Audit pack generator with filtered data exports
Reporting & Analytics
- SLA engine with breach and recovery tracking
- Role-based KPI dashboards per user tier
- Cross-tenant platform analytics (owners only)
- CSV/PDF export with audit pack bundling
API & Integrations
- 25+ REST resources with hashed API key auth
- CIDR IP filtering and 90-day key expiration
- OAuth-based connections with webhook dispatch
- Real-time usage analytics for billing integration
Payroll
- Timesheet reconciliation from GPS-verified clock-ins
- Attendance and overtime validation before pay runs
- Jurisdiction-aware pay rules per site and role
- Export-ready pay files for downstream payroll providers
Shield AI
- AI assist inside Careers, DAR, and Incident modules
- Suggestions surface inline; humans approve every action
- Tenant admins control which AI features are enabled
- No standalone chatbot; AI is embedded where work happens
Mission-Critical Systems, Not Feature Lists.
These are not checkboxes. They are the systems that define how your operation runs every shift, every day.
Daily Activity Reports (DAR)
Every shift generates an immutable DAR, auto-created at clock-in and auto-closed at clock-out. Officers log timestamped activities with GPS coordinates. Incidents, patrol data, and form submissions all link back to the DAR, creating a complete shift record that holds up to client review and legal scrutiny.
- Auto-created at clock-in, auto-completed at clock-out
- GPS-stamped entries with photo attachments
- Supervisor review and approval workflow
- Linked to incidents, patrols, and form submissions
The DAR is the single source of truth for every shift. Every module writes to it; every audit reads from it.
Incident Command Panel
ICS-style incident management from detection through resolution. Assign incident commanders, classify severity, track response timelines, and generate post-incident reports within a structured workflow that documents every action for liability protection.
- Commander assignment with priority badges
- Response workflow documenting actions and resources
- Multi-party escalation with timeline tracking
- Post-incident analysis with exportable reports
Every response action is documented with timestamps and actor attribution, creating a defensible record.
Gate Scanner & Muster System
The access control system handles high-throughput badge scanning optimized for HID hardware with high-throughput keystroke handling. A real-time 'Still On-Site' panel shows duration warnings at 4 and 8 hours. During emergencies, the Muster function provides instant headcount with last-known gate and check-in status.
- HID-optimized scanning with high-throughput detection
- Duration warnings: Amber at 4h+, Red at 8h+
- Emergency muster with real-time headcount
- Auto-close sessions at 12-hour threshold
Know exactly who is on-site at any moment and account for everyone in seconds during an emergency.
Training & Academy
More than an LMS: a gating system. Training packs bundle required and optional courses with passing thresholds. Guards cannot be scheduled, dispatched, or deployed until their required training is complete. Platform owners manage master templates; each tenant customizes for their organization.
- Gating rules block deployment until completion
- Configurable by license level, position, or site
- Quiz-based assessments with score tracking
- Certification expiration alerts and renewal workflows
Managers cannot override gating. The system enforces training requirements, not people.
Built for How Security Actually Works.
Specific operational workflows designed for the real challenges each environment creates. No generic "solutions for every industry" language.
Private Security Companies
You're managing 200+ guards across 30 client sites using spreadsheets for schedules, a separate app for time tracking, email for incident reports, and QuickBooks for invoicing. Compliance paperwork lives in filing cabinets.
One platform handles it all. Schedule every shift, verify clock-ins by GPS, capture DARs and incidents in real time, auto-generate invoices to each client's contract, and enforce compliance with jurisdiction-aware soft-blocks.
- Multi-tenant: each client's data is fully isolated
- Revenue flows through your own Stripe Connect account
- Guards who aren't compliant are automatically blocked from dispatch
Corporate & Property Management
Multiple properties with different security teams, no centralized incident tracking, and no way to give property managers real-time visibility into coverage status.
Centralized oversight across all properties with per-site guard tour routes, incident command, gate scanning for visitor and contractor access, and a client portal giving each property manager their own coverage dashboard.
- Gate scanner for entry/exit with real-time headcount
- Emergency muster shows who's on-site during incidents
- White-label portals branded per property management company
Construction Sites
High workforce turnover, fluctuating contractor access needs, remote perimeters with poor connectivity, and safety compliance that varies by trade and certification.
Dynamic badge issuance scales with your workforce. Gate scanners handle high-throughput entry/exit with duration warnings. Geofence enforcement ensures guards are at their posts.
- Auto-issue badges during onboarding, bulk issuance for contractors
- Duration warnings at 4h and 8h, auto-close at 12h
- Credential, clearance-zone, and muster records stay in one operational system
Data Centers
Every entry and exit must be logged and auditable. Multi-factor access is mandatory. Equipment calibration, firmware tracking, and disaster recovery documentation are non-negotiable.
Gate access scanning built for high-throughput entry and exit, real-time headcount monitoring, MFA enforcement across all access tiers, asset management with calibration scheduling, and DR planning with RTO/RPO objective tracking.
- 7-year audit log retention with full attribution
- Audit pack generator bundles compliance data on demand
- Certificate pinning hardens mobile communications
Government & Public Sector
SLA-bound service agreements with zero tolerance for gaps. Compliance-driven reporting requirements. Absolute data isolation between agencies and contractors.
SLA engine monitors response times and patrol compliance with automated breach tracking. Row-Level Security ensures zero cross-agency data visibility. ICS-style incident command coordinates multi-party response. Audit packs generate on demand for regulatory review.
- Jurisdiction-aware compliance with granular soft-blocks
- Context-switch audit trail for platform oversight integrity
- Dual-layer RBAC with 19 role definitions across 5 portals
Event Security
You need 50 guards credentialed, briefed, and deployed in 72 hours, then need complete post-event reporting including incidents, timesheets, and coverage proof.
Open shift board for rapid team assembly. GPS tracking and dispatch messaging coordinate teams in real time. Shift monitoring catches no-shows instantly. Post-event: export timesheets, incident reports, and patrol logs in one audit pack.
- FCM push notifications for instant coordination
- Quick Time Clock for frictionless one-tap clock-in
- Real-time dispatch and presence updates across large event footprints
Every Tool in Their Pocket.
Mobile-ready operations built on Capacitor, with native iOS capabilities and Android development underway: GPS clock-in, DARs, patrols, incident capture, dispatch, and training.
GPS-Verified Clock-In
Tap to clock in. The system captures GPS coordinates, checks geofence boundaries, and requires a selfie. No buddy punching, no location fraud, no paper timesheets.
Daily Activity Reports
Officers log shift activities with timestamps and GPS coordinates directly from their phone. Every entry links to the DAR as an immutable record of what happened, where, and when.
Incident Capture
Report incidents on the spot with structured forms, severity classification, location data, and photo/video evidence. Reports auto-link to the active DAR for complete shift context.
Shift Alerts & Dispatch
FCM push notifications for shift reminders (2 hours before start), dispatch assignments with priority-based acknowledgment deadlines, and geofence violation alerts.
Patrol & Checkpoint Scanning
Execute guard tour routes with NFC/QR checkpoint scanning. Missed checkpoints trigger automatic supervisor alerts and feed into SLA compliance metrics.
Offline Field Operations
Offline foundations for time-clock entries, employee incident reports, operational forms, and evidence media are built and being prepared for controlled field validation. Emergency dispatch actions are intentionally blocked offline for life-safety reasons.
Security That's Engineered In, Not Bolted On.
Tenant isolation at the database layer. MFA at the authentication layer. Audit logging at every layer. Certificate pinning on every mobile device.
Row-Level Security (RLS)
1,265 Row-Level Security policies across every tenant-scoped table enforce isolation at the database level. Every query is filtered by tenant context. Cross-tenant data access is not just policy-blocked; it is architecturally prevented.
Dual-Layer RBAC
Application roles control dashboard routing. Staff role codes control module access within dashboards. 19 role definitions across 5 portals, from Platform Owner to Applicant, each with precisely scoped permissions.
Multi-Factor Authentication
Mandatory TOTP MFA for platform owners and admins. Configurable tenant-level enforcement for employees. Admin login is restricted to company domain emails; no OAuth bypass is allowed.
7-Year Audit Trail
Every login, data change, API call, and administrative action is logged with timestamps, actor identity, and tenant context. Audit logs retained for 7 years. API usage for 2 years. Auth events for 90 days.
PII Isolation & Encryption
Compensation data excluded from non-admin views. Disciplinary records restricted to platform owners, admins, and the affected employee. Column-level grants with safe views that exclude sensitive fields.
Tenant-Scoped Validation
Canonical resolvers verify both user identity AND tenant membership on every request. Platform owner context-switch includes visible banners and deep-clean cache purge on exit.
Session & Device Control
Active session monitoring with IP tracking. Login lockout for failed attempts. Device trust management with forced logout. Context-switch audit on every platform owner tenant entry.
Mobile Hardening
Jailbreak and root detection, secure token storage via Keychain/Keystore, certificate pinning with version tracking, and geofence enforcement on every field action.
Compliance That Enforces Itself.
An operational control layer, not a compliance checklist. Soft-blocks prevent non-compliant operations automatically. Training gates prevent unqualified deployment. Audit packs generate on demand.
Jurisdiction-Aware Rules
Compliance requirements adapt per state and region. A company can be fully operational in Florida but soft-blocked in Texas until their Texas-specific security license is verified and approved.
Soft-Block Enforcement
Non-compliant tenants can browse dashboards but cannot dispatch guards, assign shifts, or generate invoices. Enforcement is automatic and jurisdiction-granular, with a 30-day grace period for new tenants.
Automated Expiration Monitoring
The system sends proactive alerts at 90, 60, 30, 14, and 7 days before document expiry. Compliance scores calculate dynamically as a percentage of approved documents. Amber at 30 days, red at 7.
Training-Gated Deployment
Guards cannot be scheduled or dispatched until required training packs are completed. Gating rules are configurable by license level, position, or specific site. Enforced by the system, not by managers.
On-Demand Audit Packs
Generate structured compliance packages covering incidents, training records, SLA breaches, gate access logs, and employee credentials. Filter by date, site, or department; export as CSV, PDF, or JSON.
Document Distribution & Acknowledgment
Distribute policies and SOPs company-wide with tracked employee sign-offs. Proves policy distribution for compliance frameworks. Every acknowledgment is timestamped and attributed.
The Trust Infrastructure Behind Your Operation.
Your clients need transparency. Your auditors need documentation. Your data needs isolation. This is how Shield Spire Ops delivers all three.
Your Clients Get Their Own Portal
Every client organization gets a branded portal with real-time coverage dashboards, invoice payment via Stripe, shared documents, and feedback submission. They get transparency without getting system access.
Every Action Is Auditable
Platform audit logs, tenant audit logs, API usage logs, billing audit logs, gate access logs, and context-switch audit trails. Seven years of retention with full actor attribution and severity classification.
Your Data Never Touches Another Tenant's
Row-Level Security enforces isolation at the database layer, not application logic. Your Stripe revenue, employee records, incident reports, and compliance documents exist in a boundary that other tenants cannot reach.
Built for the Contract You're Bidding On
SLA engine with breach tracking, disaster recovery planning with RTO/RPO documentation, audit pack generation, and seven-year log retention. The compliance infrastructure that wins enterprise and government contracts.
See It Running Your Operation
Tell us your scale, your sites, and your pain points. We will walk you through exactly how Shield Spire Ops handles them.
One platform. Every shift. Every site. Every audit.
See how Shield Spire Ops handles your operation. Schedule a guided demo tailored to your scale and requirements.
Request a Demo