Security & your data
Your customer list is your business. We treat it that way.
You don't need a compliance department to deserve straight answers about your data. Here's how FieldOps handles it — in plain English, with the exits clearly marked.
Your data is yours. Full stop.
Customers, jobs, invoices, price book, photos — export all of it to clean CSV from the settings page, any plan, any day, no export fee and no phone call where we try to talk you out of it. If you cancel, your account stays readable for 30 days and we delete everything on request after that.
- One-click CSV export of every table
- Photos downloadable in bulk
- Deletion on request, confirmed in writing
Backups you never have to think about
Your database is replicated continuously across two regions, with encrypted nightly snapshots kept for 30 days. We run a restore drill every quarter — an untested backup is a rumor, not a backup.
- Continuous replication, two US regions
- Nightly encrypted snapshots, 30-day retention
- Quarterly restore drills, results published
Locked up in transit and at rest
TLS 1.2+ on every connection, AES-256 encryption at rest, and passwords hashed with a modern algorithm — the standard kit, actually deployed. Two-factor authentication is available on every plan and we nag owners until it's on.
- TLS 1.2+ everywhere, HSTS enforced
- AES-256 at rest
- 2FA on all plans; SSO on Pro
Techs see jobs, not your P&L
Role-based permissions ship on every plan: techs get their day and their jobs, office staff get scheduling and invoicing, and financial reports stay with the owner. Pro adds a full audit log of who changed what, when.
- Roles: owner, office, tech — customizable on Pro
- Payroll and margins visible to owners only
- Audit log on Pro
Card numbers never touch our servers
Payments run through PayAnchor, a PCI DSS Level 1 processor. Card data goes from your customer's phone straight to the processor's vault — FieldOps stores a token, not a card. There is no card number in our database to steal.
- PCI DSS Level 1 processor
- Tokenized cards on file
- Disputes handled inside the app
Built to stay up during your busy season
99.9% uptime target with a public status page, and the mobile app works offline when the internet doesn't — jobs close, photos attach and invoices queue until you're back on signal. Heat waves are our load tests.
- 99.9% uptime target, public status page
- Offline mode in the field app
- Status alerts by text when anything degrades
In writing
What we will never do
- Sell, rent or share your customer list — it's yours, and it's the crown jewels of your business
- Mine your data to help a competitor or a private-equity roll-up price your market
- Charge for exports, hold data hostage at cancellation, or make you call to leave
- Train sales staff to upsell you a plan your crew size doesn't justify
These commitments are written into our terms of service, not just this page. A SOC 2 Type II audit is in progress; the report will be available to customers under NDA when it lands.
Have a sharper question?
Ask it on the demo or email us — security questions get answered by the people who built the thing, not a scripted queue.