Security and your data
Who can see your data.
We’re a small, new service. This page says what we do, and what we don’t have.
14 days free. No card needed.
What we do.
Three things, in plain words.
Businesses are kept apart
Each business’s data is kept apart. Our app checks the business whenever it reads or writes your data. The check is in the app. It isn’t also enforced inside the database.
Sign-in has limits
Passwords are stored as hashes, not as plain text. Ten wrong tries lock a login for 15 minutes. You can see your sign-ins and end them.
Files open by private link
Photos and files open through private links that expire.
Who can do what.
There are four kinds of login. Each one reaches different things.
Admin
Everything staff can do. Admins also change billing and settings, and add staff.
Staff
Orders, customers, invoices, and stock.
Driver
The route and the stops, in a web browser.
Store
Its own prices, orders, and invoices, in a web browser.
Access goes by role. You can’t set it for one person. The server checks the role too, as well as the screen.
Who at RouteFlow can see your data.
To help you, our staff can sign in as the admin of your account.
- How long. A support sign-in lasts 15 minutes.
- What it can do. It can change your data, the way an admin can.
- What it can’t do. It can’t change billing, payment setup, or your own sign-in details.
- Is it recorded. Yes. We record the start of each support sign-in.
The details
What you can check, and what we don’t have.
We name the gaps instead of showing badges.
What can I check myself?
- The edit history of an order
- The payments on an invoice
- The history of your stock
- Your own sign-ins, which you can end
What do you record?
We record changes, with who made them and when.
Only RouteFlow staff can read that record. You can’t read it yet.
What don’t you have?
- Two-step login
- Company single sign-on
- An API, or webhooks you set up
Who helps you run RouteFlow?
The companies that help us are listed in our Privacy Policy.
Found a problem?
Email hello@routeflow.info and say it’s about security.