Security

Every shop’s records are its own

• Each shop’s records are walled off in the database itself, not only in the app: a request for another shop’s records returns nothing, whatever asks for it.
• Automated tests check every table for this on every change we make.
• Owners and techs have different permissions. Techs can’t change settings, prices, or payments, and owners can limit techs to their own jobs and those customers’ messages.

Signing in

• Two-step sign-in: anyone can add a code from an authenticator app (More › Two-Step Sign-In). With it on, a password alone opens nothing, on the website, in the app, or through our servers directly.
• Passwords are at least 10 characters and are never stored in readable form.
• Removing someone from the team ends their access to the shop’s records at once.

Phones in the field

• The records saved on a tech’s phone are encrypted.
• Signing out removes the shop’s records from the phone.

Customers

• Reports, quotes, and invoices are shared with a private link that can’t be guessed. A link stops working after 180 days, and the shop can turn one off at any time.
• Card and bank details go straight to Stripe and never reach Sundeck Pro. Payments are made to the shop’s own Stripe account.
• Customers can stop reminder emails with one click.

A record you can trust

• A report can’t be changed once it’s sent, and original photos are kept as taken.
• Every change to a job is logged: who made it, on which device, what it was before, and when.

Where data lives

• Records are stored with Supabase in the United States, encrypted on disk, and sent only over encrypted connections (HTTPS).
• Messages from our payment and phone providers are checked for a valid signature before we act on them. Texts and calls go only to US and Canadian numbers.
• The other companies we use, and what for, are listed in our privacy policy.

Found a problem?

Write to support@sundeckpro.com. We read every report and reply quickly.