Your customer list is the business. Nobody else gets to see it.
Two-factor authentication
Scan the code with any authenticator app
A foundation company runs on data other people would love to have.
Think about what is actually in your system. The neighborhoods where you have found problem soil. What you pay Nash or ECP for a helical pier, and what you charge. The homeowners who financed, the ones who paid cash, the ones still on a payment schedule. A competitor who got a copy of that would know your whole playbook by Friday.
Then there is the inside view. Your CSR needs to see who to call back. Your scheduler needs the board. Neither of them needs to see the commission your top rep earned last month, or the margin on the job they just booked. When one shared login opens all of it, you are trusting policy instead of the software to keep those numbers where they belong.
And the quiet risk: a password. People reuse them. One leaked login from some unrelated website, and if that is all it takes, someone is inside your customer records. Security in this trade is not an abstract IT topic. It is your pricing, your pipeline, and your homeowners’ personal information.
The short version
Three things hold up everything else.
Complete data isolation
Every company's data is separated from every other company's. No contractor can ever see another contractor's contacts, jobs, pricing, or payments. Your records are yours alone, walled off at the account level.
Encrypted in transit and at rest
Data is encrypted while it travels between your device and the platform, and encrypted while it sits in storage. Connection tokens for services like calendars and email are stored encrypted too, not in plain text.
Access tied to a role
Employees only see what they need to do their job. Owners get the full financial picture. Schedulers and CSRs get the tools for their day without the revenue and commission numbers that are not theirs to see.
One login per person. The right view for each.
Owner-only, enforced by the server
Owner controls
A few settings are locked to the account Owner, even above Admin, so billing and company-wide access can never be changed by mistake.
A stolen password should not be enough to get in.
Turn on two-factor authentication and signing in takes two things: the password, and a code from an app on the person’s phone. It works with any standard authenticator, like Google Authenticator, Authy, or 1Password. You scan a QR code once to enroll, and you get ten single-use backup codes in case a phone is lost.
The part owners care about: you can require it for the whole business with one toggle. Not a suggestion in an email that half the team ignores. A rule. New hires enroll before they can work. If someone’s password leaks in an unrelated breach, that code on their phone is the wall that stops it from mattering.
- Any authenticator app using standard time-based codes. No proprietary token to buy or manage.
- Ten backup codes issued at enrollment, so a lost phone does not lock anyone out for good.
- Business-wide enforcement from one setting, so the whole team is covered, not just the careful people.
Clean accounts, encrypted connections, and a human on the send button.
A few smaller decisions add up to a system you can trust with real customer data. Email addresses are globally unique across the platform, so one person cannot end up with duplicate or overlapping accounts, and invitations resolve to exactly one identity. When you connect an outside service like a calendar or a send-from email, the token that authorizes that connection is stored encrypted, not sitting in the open.
And one rule that protects your name in front of homeowners: documents that go to customers, like estimates and contracts, are never fired off automatically. A person on your team reviews and sends every one. The software drafts and prepares. It does not decide, on its own, to email a five-figure proposal to a homeowner. You stay in control of what leaves the building.
- Global email uniqueness with atomic registration and invite acceptance, so accounts do not collide or double up.
- Connection tokens encrypted at rest for calendars and send-from email, never stored as plain text.
- No auto-send to homeowners. A human reviews and sends every estimate and contract. See the whole platform
- Invite your team by a tokenized email link, so access starts with an explicit invite, not a shared password.
- Deactivate and reactivate users without deleting their history, so an old job's record stays intact after someone leaves.
- Per-user notification preferences, so each person controls their own alerts instead of one setting for the whole team.
The line between roles runs through the whole platform.
On the reports
Revenue, margin, and rep performance sit behind the owner and manager roles. The commission ledger and profit numbers stay out of the CSR and scheduler views entirely.
On the schedule
A field tech opens the scheduling and dispatch app and sees only their own assigned stops. Data isolation on the phone means one tech never sees another tech's route.
On the customer record
Everyone who touches customer communications works from the same timeline, but the financial detail on a job stays scoped to the roles allowed to see it.