SECURITY & PRIVACY

Your crew’s records deserve clear answers.

Where is the data stored?

We have not verified the production hosting and backup regions, so we do not claim Canada-only data storage. Ask sales@crewcred.ca for the current hosting details before making a data-residency decision.

Your company’s data

Company administrators can download a company-level export and a worker CSV during an active subscription. If you cancel, you may request an export within the period described in our Privacy Policy. The policy currently allows up to 30 days after termination for a reasonable export request, then deletion or anonymization subject to applicable legal and backup requirements. We will not promise immediate deletion or a precise backup-deletion date until those settings are confirmed.

Connections and data sharing

Fleet telematics connections to Geotab, Samsara and Motive, and a QuickBooks connection, are not currently available. Naming a provider on our roadmap does not authorize data sharing with it. Before enabling a future connection, we will explain the data involved, its purpose, the recipient and how to disconnect it. Current company exports are started by an authorized administrator; treat downloaded copies as company records.

Automatic operations review flags are visible to company administrators and supervisors. Workers cannot access the company-wide exception list. These rules check saved records while the operations workspace is open; they do not certify regulatory compliance or automatically send information to an outside fleet platform.

Account security

Customers sign in using a one-time code sent to their email address. Codes expire after ten minutes, are limited to five attempts and can only be used once. Sessions expire after seven days and can be ended by signing out. CrewCred checks company membership and permissions on the server after sign-in. Owner controls use a separate password login.

Company separation

Every protected database query and stored-file lookup is scoped to the signed-in user’s organization. Workers receive a limited view, supervisors receive operational access, company administrators manage their company, and CrewCred owner tools use a separate server-side owner allowlist.

Documents and uploads

Uploads are stored under company-specific private storage paths. CrewCred restricts file size and type, checks file extensions and file signatures, prevents executable uploads, and checks company ownership again before returning a file. Protected documents are not placed in the public website directory or offline cache.

Billing

Payment-card details are collected and processed by Stripe, not CrewCred. Stripe secret keys and webhook secrets remain server-side. CrewCred verifies signed webhook events, rejects duplicate events, validates configured server-side Price IDs, and limits billing tools to company administrators.

Encryption and web hardening

CrewCred requires HTTPS in production and sends HSTS, clickjacking, content-type, referrer, permissions and Content Security Policy headers. Data is encrypted in transit. Provider-managed storage protections apply to hosted database and object storage; the exact at-rest configuration is being verified. CrewCred does not claim customer-managed encryption keys.

Auditability

Important company, worker, safety, file, dispatch, training, billing and administrative actions are recorded in append-only application audit history. Normal users cannot edit audit records. Authorized administrators can search and export their company’s audit history.

Employee GPS

Precise employee GPS collection is not active in the current production build. The security settings model defaults GPS to off and requires clocked-in-only operation if it is enabled later. CrewCred will not describe continuous or background tracking as active until collection, stop-on-clock-out and retention controls have been implemented and tested.

Backups and recovery

CrewCred maintains an internal recovery procedure and production-readiness checklist. Automated backup and restoration status must be verified with the hosting provider before enterprise or municipal security assurances are made.

Reporting security concerns

Report suspected unauthorized access or privacy concerns to sales@crewcred.ca. Do not include passwords, payment-card details or unnecessary sensitive information.