Shovels.ai

Electrification market intelligence platform

Enterprise evidence

Insufficient enterprise evidence

Public information covers data handling, reliability & support. Still unresolved: security assurance, sso & provisioning, access controls.

12 official sources · Fresh page review · Not independently tested

Sources reviewed 2026-10-21

2 / 7 areas with published evidence · 0 independently verified

Evidence & checks

Security assuranceMixed claims — review

### SOC 2 Type 2 ReportReviewed 2026-10-21View source

### SOC 2 Type 2 Representation LetterReviewed 2026-10-21View source

Is Shovels SOC 2 compliant?Reviewed 2026-10-21View source

What does SOC 2 Type 2 mean, and why does it matter?Reviewed 2026-10-21View source

Before relying on it
Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.

SSO & provisioningNot found

Before relying on it
Test SSO enforcement, user removal and privileged-account recovery.

Access controlsNot found

Before relying on it
Test least-privilege roles and cross-tenant access with separate test accounts.

AuditabilityNot found

Before relying on it
Verify administrative and data-access events, retention and export.

Data handlingCompany-published

- Data Retention and Disposal PolicyReviewed 2026-10-21View source

Data Retention and Disposal PolicyReviewed 2026-10-21View source

Before relying on it
Review DPA, subprocessors, retention, deletion, residency and AI training use.

Reliability & supportCompany-published

This includes controls related to logical access, change management, risk assessment, monitoring, incident response, and vendor management.Reviewed 2026-10-21View source

Shovels maintains a formal Security Incident Response Plan covering identification, prioritization, containment, communication, and resolution.Reviewed 2026-10-21View source

Before relying on it
Request SLA, incident history, recovery targets and support escalation terms.

Product effectivenessNeeds clarification

You may revoke this permission at any time by emailing legal@shovels.ai, and Shovels will cease new uses and remove the marks from then-current website and digital marketing materials within thirty (30) days, but need not recall or modify materials already printed, distributed, or in circulation.Reviewed 2026-10-21View source

Before relying on it
Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.

Published claims are not verified controls. No hands-on performance or security testing has been performed.

What we know

Shovels provides AI-classified electrification permit data, including heat pumps, to help companies identify active installers and project trends nationwide.

Worth asking

How can contractors integrate granular permit data directly into their daily CRM workflow to prioritize high-intent neighborhoods?

Sources

Evidence details

Enterprise controls

### SOC 2 Type 2 Report ### SOC 2 Type 2 Representation Letter Is Shovels SOC 2 compliant

Developer access

Build construction intelligence into your product, CRM, or internal tools with our REST API > Comprehensive guide to the Shovels REST API, including authentication, pagination, error handling, and getting started information The Shovels REST API makes it easy for technology developers in the property, climate, and construction industries to access detailed information about building permits, contractors and construction activity

Last checked Oct 21, 2026

Company-published evidence, not an independent audit. Unknown means unverified.