Getting Started

Procore Integration

Sandspit connects directly to your Procore account using secure OAuth 2.0 authentication. This guide explains how the integration works and what data is synchronized.

Authentication

Sandspit uses Procore's OAuth 2.0 flow for authentication. When you sign in, you're redirected to Procore where you authorize Sandspit to access your data.

Key points about authentication:

No password storage — We never see or store your Procore password
Token-based access — We receive a secure access token from Procore
Automatic refresh — Tokens are refreshed automatically to maintain your session
Revocable access — You can revoke Sandspit's access anytime from Procore

Multi-Company Support

If you have access to multiple companies in Procore, Sandspit will detect all of them. You can switch between companies using the company selector.

Permissions

Sandspit inherits your existing Procore permissions. You'll only see and be able to modify data you already have access to in Procore.

Permission Levels

Procore Permission	Sandspit Access
Admin	Full access - view, edit, create, and manage all submittals
Standard	View and edit submittals you have access to
Read Only	View submittals only, no editing capabilities

Permissions are synced automatically from Procore. If your Procore permissions change, Sandspit will reflect those changes within a few minutes.

Data Synchronization

Sandspit maintains a synchronized copy of your Procore data to provide fast, responsive views. Here's what gets synced and how often.

What Gets Synced

For each project you import, Sandspit syncs:

Submittals — All submittal records with full metadata
Workflows — Approval steps, responses, and attachments
Spec sections — Spec section data for filtering
Companies — Ball-in-court company information
Custom fields — All custom field definitions and values
Attachments — Attachment metadata (files remain in Procore)

File Storage

Sandspit does not download or store your files. Attachments are served directly from Procore when you view them.

Sync Frequency

Sync Type	Frequency	Description
Automatic	Every 5 minutes	Background sync for all active projects
Webhook	Real-time	Instant updates when Procore data changes
Manual	On demand	Trigger a sync from project settings
View refresh	Every 2 minutes	UI refresh for active browser tabs

Webhooks

For real-time updates, Sandspit can register webhooks with Procore. When enabled, Procore notifies Sandspit immediately when data changes.

Webhooks provide:

Instant updates — Changes appear in Sandspit within seconds
Reduced API calls — Less polling means better performance
Efficient sync — Only changed data is fetched

Enabling Webhooks

Webhooks can be enabled per-project in your project settings. We recommend enabling them for your most active projects.

Security

We take the security of your data seriously. Here's how we protect your information:

Encrypted in transit — All data is transmitted over HTTPS/TLS
Encrypted at rest — Stored data is encrypted using AES-256
Access controls — Strict permission enforcement based on Procore access
Audit logging — All data access and changes are logged
SOC 2 compliant infrastructure — Hosted on enterprise-grade cloud infrastructure

For more details about our security practices, see our Privacy Policy and Terms of Service.