Security

Pool companies trust us with their clients' addresses, gate codes and photos. Here is how we look after them.

Your Jobber connection

• You connect through Jobber's own sign-in (OAuth). We never see your Jobber password.
• Jobber access tokens are encrypted in our database (AES-256-GCM) and never written to logs.
• We ask Jobber only for what we use: clients and properties, team members, jobs and visits.
• Messages from Jobber and Stripe are checked for a valid signature before we act on them.
• Disconnecting deletes our tokens straight away.

Who can see what

• Every company's data is kept separate, and every request is checked on our servers against the signed-in person's company and role. We test this automatically.
• Owners and office staff see the company; techs see their own route and their own logs.
• Team members sign in with a one-time email link that works once and expires after 15 minutes. Turning a login off signs that person out at once.
• Homeowner reports use long random links (they can't be guessed), show only that one report, and are hidden from search engines.

Photos and files

• Only JPEG, PNG and WebP images are accepted, with size limits. Every photo and logo is re-encoded on our servers, which strips location data and anything hidden in the file.
• Files are stored per company and are only served to people allowed to see them.

Running the service

• All traffic uses HTTPS. Hosting is Netlify; the database is Neon (managed Postgres); email is Resend; payments are Stripe. We never see card numbers.
• Public forms and sign-in are rate limited.
• Logs and error reports have email addresses, tokens and other secrets removed.
• Work that talks to Jobber is retried safely: chemicals are never added to a visit twice.

Found a problem?

Please email hello@goldstandardweb.com with “Security” in the subject. Tell us what you found and how to reproduce it; don't access or change other people's data. We'll reply within two business days.