Security

Security built into every workspace

Your quotes, prices, customers, and books are your business. Here is how we keep them private and in your control.

Security practices

Two-step sign-in for everyone

Every team member signs in with a password plus an authenticator app or a passkey. Recovery codes cover lost devices, and owners can reset a member’s second step.

Roles for every member

Owner, Administrator, Office, Production, and Staff roles decide who can see billing, settings, and financial records.

Each business kept apart

Every record carries its organization. The application filters every query, and the database enforces row-level security as a second barrier.

Encrypted in transit and at rest

Traffic uses TLS with HSTS. Databases and files are encrypted at rest in Microsoft Azure, and integration secrets are encrypted again by the application.

Card data stays with Stripe

Card and bank details go straight to Stripe, a PCI DSS Level 1 service provider. They never touch our servers.

Audit log

Membership, role, billing, and support-access events are recorded with who, when, and from where. Owners and administrators can review them in settings.

Support access on your terms

Our support team can view your workspace only after an owner turns support access on. Sessions are read-only, last at most 60 minutes, and appear in your audit log.

Your data, your call

Request a full export at any time. If you cancel, your data stays available for 90 days before it is deleted.

No trackers on this site

This website sets no cookies and loads no third-party scripts or fonts. Strict security headers apply to the site and the app.

Report a vulnerability

Found a security issue? Email security@factoryterminal.com with steps to reproduce. Please do not test against other customers' data or disrupt the service.

Questions from IT or your insurer?

We will walk through our controls and the subprocessors we use.

Contact us

Ready to run your shop in one place?

Try every Professional feature free for 7 days. No card required, and nothing is deleted if you decide to wait.