Field Blasters

Security & your data

Your customer list is the business. We treat it that way.

Plain answers to the questions worth asking before you put years of customer records into somebody else's software.

Is my data separated from other companies'?

Yes, and not by a filter in the software. Every record carries the company it belongs to, and the database itself refuses to return one company's rows to another company's login. That rule sits underneath the application rather than inside it, so a bug in a screen cannot get around it.

We test this the only way worth testing it: two real companies on the live system, trying to read, write, forge and reach into each other's records, with every attempt asserted to fail. It runs as a suite, against the real database, not as a diagram.

Who inside my company can see what?

You decide, per person. A technician can be limited to their own jobs, or given the whole customer book. Pay rates are not visible to the crew. Someone who works the phones gets the office view rather than the field one.

Those permissions are enforced by the server and the database — not just hidden in the interface. A person who is not allowed to do something cannot do it by finding another route to it.

Where are my customers' card details?

With Stripe, in your own Stripe account. Field Blasters never sees a full card number and never stores one — there is nothing in our database to steal. Your customers' saved cards belong to your Stripe account, which means they survive you leaving us.

Who can get into my account?

Everyone signs in with their own email address and their own password. Sessions end when someone signs out, and signing out clears the copy of your data held on that device — which matters on a shared phone in a truck.

What about my customers?

Your customers reach their own page through a private link rather than a password they will forget. Each link opens exactly one account and nothing else. Email to them comes from your business name with replies going to you — never from us, and never with our name on it.

Is anything backed up?

Yes. The database is backed up continuously by our hosting provider, and deletions inside the app go to a trash that holds them for 30 days rather than removing them immediately. Deleting the wrong customer at 7am is a recoverable mistake.

What happens if I leave?

Your data stays readable and exportable for 90 days, and we delete it whenever you ask us to. Your Stripe account, your customers and their saved cards were always yours and are unaffected — that is the point of connecting your own account rather than using ours.

What we are not going to claim Field Blasters has no SOC 2 report, no uptime guarantee, no single sign-on and no compliance certifications. It is built by a small team for small crews. If your business requires those things on paper, we are not the right supplier and would rather say so on this page than in month four.
Found something? If you think you have found a security problem, email hello@fieldblasters.com and it will be read the same day. We would much rather hear from you than not.

Any question not answered here?

Ask it. A straight answer is free and takes about a minute.