Security
Last updated: April 2026
Security is a core part of how we build ServicePros. Your business data — customer records, job logs, financial info — deserves serious protection. Here's what we do to keep it safe.
Encryption in Transit
All data is transmitted over TLS 1.2+ (HTTPS). Unencrypted connections are rejected.
Secure Infrastructure
We use enterprise-grade cloud infrastructure with physical security, redundancy, and automated backups.
Authentication Controls
Password hashing with bcrypt, session token rotation on login, and secure cookie handling.
Access Controls
Role-based access ensures team members only see data relevant to their role (Admin, PM, Sales).
Monitoring & Alerting
Real-time monitoring for anomalous activity, failed login attempts, and service health.
Payment Security
Payments processed by Stripe (PCI-DSS Level 1 certified). We never store card data.
Data Storage
All data is stored in managed databases with encryption at rest. Database access is restricted to application servers only — no public access is permitted. Regular automated backups are performed and stored in geographically separate locations.
Third-Party Vendors
We carefully vet all third-party vendors we integrate with. Current key vendors include:
- Stripe — PCI-DSS Level 1 certified payment processor
- Base44 — SOC 2-aligned infrastructure provider
- OpenStreetMap/Nominatim — open-source geocoding service
Employee Access
Access to production systems and customer data is strictly limited to engineers who need it to provide support. All internal access is logged and audited. We follow the principle of least privilege.
Incident Response
In the event of a security incident, we will notify affected users within 72 hours of becoming aware of it. We maintain an incident response plan that includes containment, investigation, and remediation steps.
Vulnerability Disclosure
If you discover a security vulnerability in ServicePros, please report it responsibly to security@servicepro.app. We ask that you do not publicly disclose the issue until we have had time to address it. We take all reports seriously and will respond within 48 hours.
Contact
For security-related concerns, email security@servicepro.app. For general support, email support@servicepro.app.