Crewhand

Security at Crewhand

Your customers, jobs, invoices and books are your business. This is how Crewhand keeps them safe. Questions, or something to report: support@gocrewhand.app.

Your company's data is kept apart

Every company has its own separate database. No screen or report can reach into another company's data, and inside your company each person sees what their role allows: crew don't see money unless you let them.

Encrypted

Everything between your phone or computer and Crewhand travels over HTTPS (TLS 1.2 or newer), with HTTP Strict Transport Security. Passwords to other services you connect, such as your mailbox or bank, are encrypted by Crewhand with a key kept apart from the data and its backups, on the hosting provider's encrypted disks.

Signing in

Passwords are never stored, only salted PBKDF2-SHA256 hashes (1,000,000 rounds). Two-step sign-in with an authenticator app and backup codes is there for everyone, and required before a bank can be connected. Repeated wrong passwords lock that address out for a while; sessions can be signed out from anywhere.

Backed up every night

Every company's data is copied each night and each copy is opened to prove it can be restored before it counts. A copy is kept off-site, away from the servers.

Bank connections

Bank feeds use Plaid, read-only: Crewhand can never move money. Only the company's owner can connect a bank, and disconnecting removes the connection at Plaid and erases the stored access.

Payments

Card payments are taken by Stripe. Card numbers go straight to Stripe and never touch Crewhand.

Watched and kept up to date

Sign-ins and sensitive changes are written to an audit log you can see under Settings. Every change to Crewhand passes an automated test suite (permissions, company separation, money and security) before it goes live, and security fixes in the software Crewhand is built on are applied within 7 days for critical issues and 30 days for high ones.

Leaving

You can export your data at any time. Deleting your company's account deletes its data from the live system right away; backup copies age out on their own.

Is Crewhand working right now? · Privacy · Support