Legal
Security
Last updated June 2026
Data handling
Files are stored in US-based object storage with SHA-256 checksums and background virus scanning.
Access control
Role-based access enforces least privilege. Subcontractors are job-scoped with no pricing, margin, or customer-history access.
Authentication
Email/password and magic-link auth for staff, with optional MFA for Owner/Admin roles.
Resilience
We build for resilient offline recovery and auditability - not zero-failure promises. Payment failures after reconnection never corrupt completed field records.