How we look after your data

Separation between businesses

Every business's records are isolated by the database itself (row-level security), not just by the app. Tests check that one business can't read or change another's data.

Accounts

• Passwords are hashed, never stored in plain text.
• Two-step sign-in with an authenticator app is available to every user, and required for TradiQuo staff.
• Sign-in attempts are rate limited.
• Roles control what each team member can see and do, checked on the server for every action.

Customer links

Quote links use long random tokens that are stored only as a hash. Sent quotes are fingerprinted so the customer accepts exactly what was sent. Links can be revoked and expire.

Files

Photos, recordings and documents are private and served only to people with access. File types are checked from their contents, and location data is removed from photos.

Payments and integrations

Card details are handled by Stripe and never touch our servers. Integration tokens (such as Xero) are encrypted at rest. Payment events are only trusted when Stripe's signature checks out.

TradiQuo staff access

Staff can only look inside a business's workspace through a time-limited, view-only support session with a recorded reason. Every session is logged.

Reporting a problem

If you think you've found a security issue, email security@rootxcess.com. Please don't access other people's data while testing.