Security
How FieldsHub protects your data
What we do, in plain language. We do not claim certifications we do not hold. Questions or something to forward to your IT person: support@fieldshub.com.
Where your data lives
- Hosted on Microsoft Azure in the United States: App Service for the application, Azure Database for PostgreSQL for records, and Azure Blob Storage for files and photos.
- Encrypted in transit (TLS 1.2+, HSTS with preload) and at rest (Azure storage and database encryption).
- Automated daily database backups with point-in-time restore, managed by Azure.
Payments
- Card and ACH payments are processed by Stripe. FieldsHub never sees or stores card numbers or bank credentials.
- Payouts go to your own Stripe-connected bank account. FieldsHub adds no platform fee on top of Stripe’s processing fee.
Access
- Role-based access: Admin, Manager, Worker and Accountant roles see only what their role allows. Workers see only the projects they are assigned to.
- Two-factor authentication with an authenticator app is available for every account.
- Homeowners sign in with a one-time code sent to the email or phone their contractor has on file — no password to steal.
- Sign-in attempts are rate-limited and accounts lock after repeated failures.
Accountability
- Key account, billing and project actions are recorded in an activity log that admins can review (full audit-log exports are an Enterprise feature).
- Your data is yours: download estimates and invoices as PDF on every plan, export reports to Excel on Starter and up, and ask us to delete your account and data at any time.
- Subprocessors and data-processing terms are published in the Data Processing Addendum.
Report a vulnerability
Email support@fieldshub.com. A machine-readable contact is published at /.well-known/security.txt. We acknowledge reports within two business days.
Related: Privacy Policy · Data Processing Addendum · Acceptable Use · Terms. Last reviewed October 2026.