Security

Every record carries its company. Row-level security on the database enforces that a signed-in person can read and write only within the company they have switched into. A person with two memberships sees two separate worlds.

One-time codes to the mobile number or work email the company added; no passwords to remember on site. Google and Microsoft sign-in are available where the company enables them.

Face ID photos and matching stay on the device. Location is collected only during an active shift and is shown to the worker while it runs. The Android app declares camera and location permissions for the features that need them, and no address-book permission — contacts are picked one at a time through the system picker during company setup.

Every action lands in a local store first, so the app is instant and keeps working with no signal. Captures made offline are queued in an outbox and uploaded on reconnect; a write that fails says so on screen rather than silently disappearing.

Administrators have a governance surface with the organisation's tracking policy, an access model, an append-only audit trail that can be exported, and a full export of the company's data.

If you believe you have found a security issue, contact us through the details at the foot of the site and we will respond promptly.