Security
How we protect your customer data.
A straight answer to “is it safe to give you our ServiceCore and customer data?”
The basics
- Encryption in transit (TLS) on every connection.
- OAuth and API tokens encrypted at rest.
- Org-scoped access: each workspace sees only its own data, enforced at the database.
- Role-based access inside your workspace.
Your ServiceCore connection
- Read-only by default. Write-back to ServiceCore is only enabled if you turn it on.
- We never touch your QuickBooks if you bill through ServiceCore.
- Credentials (CSV uploads, Data Share or API keys) are stored encrypted.
Backups, export and deletion
- Regular database backups.
- You can export your data on request.
- On termination, your data is available for export for a reasonable window, then deleted.
Subprocessors & contact
We use a small set of named subprocessors for hosting, database, email and analytics. A current list and our incident contact are available on request and in our Privacy Policy.
Questions about data handling?
We're happy to walk your team through it before you connect anything.
This page summarizes our practices and is not a contract. Formal commitments live in our Terms and Privacy Policy. We do not claim a SOC 2 report unless and until one exists.