How your company’s data is kept safe.
What protects it today, what’s built and switching on, and what isn’t done yet, each said plainly.
Checked against the product on October 26, 2026.
Who gets in
- In use
Only people on your roster
Signing in with Google takes a verified account on your company’s domain, or an exact address you list, and a place on your active roster. A person’s role and access are checked again on every click.
- In use
Each role sees its own part
Ten roles, from owner to field employee, and every page and action checks the person’s role on the server. Crew leaders and field employees see sites and work, never money.
- Built, switching on
Customers use a link, not a password
Your customer’s sign-in link works once, lasts seven days and can be cancelled from the office. We keep only a fingerprint of it, never the link itself.
Your company’s data
- In use
Every change is recorded
Every change a person makes is recorded with who made it and when, in the same step as the change. The record holds ids, never message text, passwords or keys.
- In use
Kept apart from other companies
Each record carries its company, and the app looks only at your company’s records. Tests fail when a query leaves the company out.
- Built, switching on
A wall inside the database
A second wall in the database itself, so even a mistake in the app can’t reach another company’s records.
- In use
A bad day can be undone
The database can be put back to any moment in the last seven days, in about 15 minutes.
- Built, switching on
Nightly copies, tested weekly
An encrypted copy every night in two more places, kept 35 days, and a weekly test that last night’s copy restores.
- In use
Yours to take
The owner, and people the owner names whose role sees money, can download your business records any day. Each download link works once, for that person, for 24 hours.
AI and connected apps
- Built, switching on
AI stays off until you switch it on
No AI runs for your company until it’s switched on. Then it only drafts, and a person approves every message before it goes.
- In use
A key for an AI app acts as you, never more
It sees only what the person who made it sees, can’t read money unless the owner allows it, and every call it makes is recorded, refusals included.
This website
- In use
Nothing from anyone else
This site loads no analytics, chat, ads or outside fonts, and sets no cookies.
- In use
Encrypted connections only
Browsers are told to use only encrypted connections, on this site and in the workspace.
Not done yet
- No SOC 2 report yet. The work toward one has started.
- No test by an outside security firm yet.
- Two-step sign-in comes from your Google account, not from us yet.
- No security address of our own yet. Until there is one, reach us through the founding-list form.
Put your company on the list.
We’re opening to service businesses a few at a time, in the order of this list. Joining is free and doesn’t commit you to anything.