Mastt
Mastt is capital project and program management software for construction owners, developers and consultants. It unifies cost, risk, schedule, documents and reporting, and adds AI agents that take on admin, document review and data entry.
What is Mastt?
Mastt is capital project and program management software for the construction industry, published by Mastt Australia Pty Ltd, a Sydney company founded in 2019 by Doug Vincent, Jamie Cerexhe and Raman Nambiar. Its origin story, told on the About page, is the elimination of spreadsheets and manual monthly reporting; that ambition has since been rebuilt around an AI-first approach.
The product comes in two layers. The platform itself covers the disciplines an owner's team works through: Project as the workspace for a single scheme, Program for the automated roll-up across dozens or hundreds of projects, Dashboard for live visual reporting, Cost for budgets, commitments, variance analysis and cash-flow forecasting, Risk for registers on a 4x4 or 5x5 matrix, Schedule for milestones, phases and gates, and Documents for structured folders with AI chat over the files. On top sits an agentic layer: Agent, Ask, Knowledge, Templates and Workflows.
Agent is the distinctive piece. It works one-to-one with each team member and is driven by email: you forward a task the way you would pass it to a colleague, and the agent breaks the goal into a plan, sequences the steps, gathers what it needs, drafts in your own templates and returns finished work, flagging anything ambiguous for a human decision. Knowledge puts the organisation's templates, procedures and lessons learned behind every task. Named AI use cases include document analysis, contract review, payment review, data entry, PDF reading and automated invoice scanning.
Mastt describes itself as a PMIS-style solution that is lighter and simpler than traditional systems, aimed at asset owners and consultants rather than contractors. It serves project owners, real estate developers, project management consultants, owner's representatives, small businesses and government across nine named industries, from aviation and healthcare to public works and utilities. Access is browser-only, with separate regional logins for Australia and Asia-Pacific, North America, and the Middle East and rest of world. There is no mobile application.
What it does
- Centralise budgets, contracts, payments, forecasts and cash flow for a capital project
- Roll up cost, risk, schedule and reporting from every project into one live programme view
- Generate interactive dashboards and visual reports on demand, and store snapshots for the record
- Delegate a task to an AI agent by forwarding an email, and receive the finished work back
- Review contracts and payment claims with AI, and extract contract and payment data automatically
- Maintain a risk register on a 4x4 or 5x5 matrix, with impacts, treatments and mitigation actions
- Ask questions of your project documents in plain English and get sourced answers
When to use Mastt / When not to
A quick filter to help you decide if Mastt is the right fit.
When to use Mastt
- Asset owners and public bodies running capital works, who need trustworthy oversight of budgets, contracts and payments across a portfolio
- Real estate developers tracking cost, payments and stakeholder reporting across several developments at once
- Project management consultancies and owner's representatives who must standardise project controls and impress clients with live dashboards
- Cost managers and quantity surveyors handling budgets, variations, retentions and payment certificates on capital projects
- PMO and programme leads who currently rebuild a spreadsheet every month to roll up dozens or hundreds of projects
When not to use Mastt
- Contractors and site-based delivery teams: Mastt is deliberately owner-side, built around the client's view of cost, risk and reporting
- Anyone needing a documented public API or off-the-shelf ERP connectors, which are announced only on the Enterprise tier and ship with no published developer documentation
- Teams that work mainly from phones in the field, since there is no iOS or Android application and access is browser-only
- Buyers whose procurement rules require the vendor to hold SOC 2 or ISO 27001, which Mastt states plainly that it does not hold
- Organisations expecting the AI to make binding calls on its own: the terms forbid fully automated decision-making and exclude any professional advice
How to use Mastt
A typical end-to-end flow, from setup to results.
- Watch the interactive product tour first if you want to see the software before creating anything, since it needs no account
- Create a free Starter account from the Start for Free button; the first project is free and no credit card is asked for
- Log in through the region that applies to you, either the Australia and Asia-Pacific workspace or the North America one
- Set up your first project by entering budgets and contracts, or let the AI upload extract contract and payment data for you
- Add payment schedules and track commitments, variations and retentions against the budget
- Build the project dashboard and pick report templates so stakeholders can see live status instead of waiting for a monthly report
- Open a risk register on the matrix that matches your organisation, and record impacts, treatments and owners
- Add further projects by taking project licences as you need them, turning projects on and off as they become active or dormant
- Roll the portfolio up into a programme view once several projects are running, to aggregate cost, risk and schedule
- Upgrade to Enterprise if you need SSO, ERP integrations, unlimited AI usage and a dedicated one-to-one rollout
Pros & Cons
Pros
- Genuinely deep in one vertical: cost, risk, schedule, documents and reporting are connected rather than bolted together
- Unlimited users on the paid tiers, with pricing charged per active project licence instead of per seat, and no stated storage limit
- A real free tier rather than a countdown trial: the first project is free and needs no credit card
- A contractual, not merely stated, commitment that neither Mastt nor its AI providers may train models on customer data
- Regional data residency on Microsoft Azure, with Australian customers' AI prompts and results kept in Australia
- A detailed and dated security corpus: TLS 1.2+, AES-256, row-level tenant isolation, NCC Group penetration testing, 24-hour backups and uptime claimed above 99.95%
- Unusual candour about what it lacks, including an explicit statement that it holds no formal certification
Cons
- The vendor holds no SOC 2 or ISO 27001 certification and says so plainly; the certifications shown belong to Microsoft Azure, at the infrastructure layer only
- No separate Data Processing Agreement is published or offered on request, and no EU Article 27 representative is designated despite a dedicated GDPR section
- Only the Professional tier shows a price; Enterprise and Agent are quote-only, so the real cost of a serious deployment is not public
- No published API documentation, and both the API and ERP integrations are reserved for the Enterprise tier
- No iOS or Android application, which is a real constraint for anyone working from site
- Archiving a project does not reduce the bill: licence counts have to be lowered manually, which is easy to forget
- Two documents dated the same day disagree on where data lives, the platform page describing an Australia and United States split while the Agent pages describe a United States region only
Pricing & Plans
A permanent free plan is available. The Starter tier costs nothing, includes the first project without a credit card, and is capped at ten tracked payments. The cheapest paid entry point is the Professional plan at 165.00 USD per active project, per month, billed monthly by credit card. Enterprise and the Agent add-on are priced on quotation. There are no setup or onboarding fees on standard pricing.
- Free - first project included with no credit card
- AI upload and AI templates
- unlimited users and stakeholders
- unlimited budgets and contracts
- up to ten tracked payments
- self-service tutorials and support
- 165.00 USD per project per month - everything in Starter plus the AI assistant for chat
- document reviews and requests
- autonomous AI contract and payment review
- additional projects and external users
- licence counts adjustable up or down
- and unlimited access to the Cost
- Risk
- Schedule and Dashboard modules
- custom quote - everything in Professional plus unlimited AI usage with no token or request caps
- unlimited projects
- programs and portfolios
- dedicated customer success
- ERP and custom API integrations
- and security enhancements including single sign-on
- custom quote - the agentic layer sold as an add-on to any platform plan or standalone
- covering Ask
- Agent
- Knowledge
- Templates
- Workflows and integrations
Data, GDPR & hosting
A consolidated view of how Mastt handles your data.
GDPR overview
The software privacy policy carries a dedicated section headed Additional Disclosures for General Data Protection Regulation (GDPR) Compliance (EU), which is unusually concrete. Mastt declares itself a data controller for the information you supply directly, lists its lawful bases (consent, performance of a contract, legitimate interests, legal obligation), requires parental consent below sixteen where processing rests on consent, and states that transfers out of the EEA are covered by European Commission standard data protection clauses, binding corporate rules or other lawful means. Access, rectification, restriction, objection, non-discrimination and the right to complain to a supervisory authority are all set out. Two gaps stand against this: no EU representative is designated under Article 27, and no separate Data Processing Agreement is published or offered. Australian obligations run in parallel, with complaints directed to the OAIC.
Who owns the data?
The customer owns the data. Mastt's AI Product Terms state that you retain all rights, title and interest, including intellectual property rights, in the Input you submit, and that as between you and Mastt you also own the Output the AI generates from it. Mastt takes a non-exclusive, worldwide, royalty-free, irrevocable, perpetual and transferable licence, but its scope is confined to running and supporting the service: security, maintenance, diagnostics, operational improvement and legal compliance. The same clause says explicitly that this licence does not allow Mastt or its AI technology partners to train or develop large language models on your material. Data can be exported as CSV, XLS or PDF during the term and for thirty days afterwards.
Reuse rights
Customers can reuse their own material freely: because they retain ownership of both Input and Output, no permission from Mastt is required to edit, publish or reuse a generated report, minute or extracted action. Two conditions attach to Output rather than to ownership. Under the AI Product Terms you must review and verify each Output before sharing it, attribute it to yourself or your entity, and disclose clearly that the content is AI-generated whenever you publish it externally. You must not present it as human-written, use it to impersonate or mislead, or rely on it as the sole basis for a decision, certification or determination under a construction contract or security-of-payment legislation. On Mastt's side, use is limited to delivering and supporting the service; Input may be passed to named AI providers for that purpose, but never for model training, and sensitive personal data must not be submitted at all.
Data retention & training
Hosting summary
Mastt hosts exclusively on Microsoft Azure. The platform security page describes regional residency: customers in the Americas have data stored in Azure data centres in the United States, while Australian and all other customers are stored in Australia. The Agent documentation, published the same day, describes something narrower, with all database records and uploaded files in a United States Azure region, running on Azure Container Apps, Azure Database for PostgreSQL and Azure Blob Storage. The software privacy policy widens the picture again, listing storage or processing in Australia, the United States, the United Arab Emirates and Saudi Arabia. Encryption is TLS 1.2+ in transit and Azure-managed AES-256 at rest, with OAuth integration tokens additionally sealed in AES-256-GCM. Tenants are isolated by workspace at row level, backups run every 24 hours and PostgreSQL offers point-in-time restore. AI processing is regionalised too: in Australia, prompts and results are kept in Australia and not stored overseas.
Things to keep in mind
Risks and trade-offs to weigh before adopting Mastt.
- The vendor holds no formal certification of its own: any SOC or ISO badge you see in its documents belongs to Microsoft Azure and covers infrastructure, not Mastt's processes. Do not carry it over into your own compliance file
- Two documents published on the same day disagree about where data lives, one describing an Australia and United States split and the other a United States region only. Confirm in writing which applies to the product you buy
- There is no published Data Processing Agreement and no EU Article 27 representative, which may block procurement in European public bodies whatever the quality of the GDPR section
- AI output is contractually excluded from professional advice and must never be the sole basis for a payment certification or a contractual determination; treating a generated payment review as an approval is the exact misuse the terms warn against
- Convenience invites over-delegation: when an agent drafts reports, minutes and reviews in your own templates, output looks finished and reviewing it honestly becomes the hard discipline that keeps a project team accountable
- Sensitive personal data must not be entered at all, and forwarding an email chain to an agent is precisely how such data slips in unnoticed
- Billing does not follow reality on its own: archiving a project leaves the licence in place, so cost creeps unless someone reduces the count manually
Setup & Integrations
Technical difficulty
Low for a first project. Nothing is installed: any modern browser is enough, and a free account is created in minutes without a credit card. Tutorials and self-help resources are included from the free tier, and an interactive product tour runs without an account. Difficulty rises only with scale. Single sign-on, integrations with Okta or Microsoft Entra ID, ERP connectors and the custom API all require the Enterprise tier and an IT conversation, and Enterprise is also where dedicated one-to-one rollout support appears. There are no setup or onboarding fees on standard pricing.
Deployment
Integrations
Behind Mastt
Social
Resources
All the official URLs gathered for verification and reference.
Alternatives
Tools that compete with or complement Mastt.
Frequently asked questions
Is there a free version of Mastt?
What does the cheapest paid plan cost?
Does Mastt train AI models on my project data?
Who owns the documents the AI produces?
Is Mastt SOC 2 or ISO 27001 certified?
Where is my data hosted?
Does Mastt offer an API and integrations?
Is there a mobile app?
Can I get my data out if I leave?
Is there a minimum age to use Mastt?
Should you pick Mastt?
Mastt is a confident vertical product rather than a general project manager, and that focus is its main strength. Cost, risk, schedule, documents and reporting are genuinely connected, the programme roll-up answers a real problem for anyone rebuilding a spreadsheet every month, and the agentic layer is more than a chat box: Agent is driven by forwarded email, plans and executes work, and returns it for approval.
Its posture on data is unusually explicit for a company of this size. Ownership of both inputs and outputs stays with the customer, the ban on model training is contractual rather than promotional, data residency is regionalised on Azure, and the security documents are detailed and dated. Most striking is the candour: rather than gesture at its cloud provider's badges, Mastt states outright that it holds no SOC 2 or ISO 27001 certification. That honesty is welcome, but it is also a fact a public buyer or a large enterprise will have to weigh, and it sits alongside two other gaps for European purchasers, the absence of a published Data Processing Agreement and of an Article 27 representative.
The commercial entry point is easy: a genuinely free first project, a product tour that needs no account, a free template library and a ROI calculator. Beyond the Professional tier at 165 USD per project per month, pricing goes dark, and the features many organisations will consider essential, single sign-on, ERP integrations and an API, all sit behind an Enterprise quote. Add the absence of any mobile application and the per-project licence model that does not shrink when you archive a project, and the picture is clear enough: strong fit for owner-side teams, with procurement questions to settle before signing.
- Choosing a selection results in a full page refresh.
- Opens in a new window.