Shop data, customer records, and claim documentation deserve the same care as the repair itself.
All traffic runs over HTTPS/TLS.
Every organization's records are scoped and isolated — your data is queryable only by your team.
Admins and estimators see what their role allows.
Passwords are stored with modern one-way hashing, never in plain text.
Key actions — estimates, approvals, invoices — are logged with user and timestamp.
HTTP-only, same-site session cookies with regeneration on sign-in.
Photo evidence is stored outside the public web root and served only to authenticated members of your organization.
Export your customers and estimates as CSV at any time. No lock-in.
Ask and your organization's data is removed — confirmed in writing.
Our formal security program (including third-party certification such as SOC 2) is in development. We do not claim certifications we have not earned — when we complete an audit, you will see it here first.