Passwords are never stored in plain text
Every password is hashed with Argon2id, a memory-hard algorithm built to resist large-scale cracking attempts — not reversible, and not something we can read back even if asked to.
Security
How your data is protected
This is a plain description of what the software actually does, not a badge or a promise. Every line below names a specific control — ask us to show any of it on a demo call.
Two-factor authentication, on when you want it
Turn on TOTP-based two-factor authentication for the whole workshop from Settings. Staff without an authenticator app are guided to set one up the next time they sign in, not locked out mid-shift.
Access is checked on the server, not just hidden in a menu
A receptionist's screen hides what they cannot do, but the server enforces the same limit independently — a shared link or a guessed URL cannot reach a screen the account was never granted.
Sessions can be cut off instantly
Remove a staff member or force a sign-out, and every device holding that session is logged out immediately, not whenever its cookie happens to expire on its own.
Automated backups, encryption on your terms
Backups run on a schedule without anyone remembering to click anything. Add a passphrase when you take one and the archive is encrypted before it leaves the server — we never see or store that passphrase, so an unencrypted backup is a choice you made, not a default we hid.
Every invoice edit and stock change is logged
Money and stock movements record who made the change and what the figures were before and after, so a dispute has an answer that does not rely on memory.
Traffic to your install runs over HTTPS
Every install we set up is put behind an HTTPS certificate before your team signs in, so login credentials and job-card data are encrypted between the browser and the server.
What we do not claim
We are not SOC 2 or ISO 27001 certified, and we do not run a dedicated security team watching your install around the clock — an honest fact for software that runs on your own hardware, not a rented cloud service. What is above is what the software does today; if a feature matters to your decision and is not listed here, ask us directly.
Questions about a specific requirement your workshop has? Bring it to the demo call and we will answer against the actual product, not a data sheet.