Security

Your business data, handled with care.

Repair orders, leases, rent payments and receipts are the records a business runs on. Here is how we protect them across all three products.

How we protect your data

The practices behind every product

Encrypted connections

Every product and this website are served only over HTTPS, with HSTS so browsers never fall back to an unencrypted connection.

Hosted on Microsoft Azure

Our applications and file storage run on Microsoft Azure infrastructure.

Private file storage

Receipts, inspection photos, leases and documents are kept in private storage and are never published on a public link.

Careful sign-in

Passwords are stored hashed, never in plain text. Sessions use rotating tokens, and sign-in and password-reset links are single-use and expire.

Payments through processors

Card and bank payments go through established processors — Stripe and 360Payments — rather than being handled by us directly.

Only what we need

We collect what the product needs to work. SpendFlow, for example, keeps only the last four digits of a card, even when the full number is printed on a receipt.

Your data stays yours

Each account’s records are tied to that account. We do not sell customer data, and you can ask us to export or delete it.

Trusted providers

We rely on established providers to run our services — including Microsoft Azure, Stripe, Google, Twilio, Telnyx and QuickBooks — each for a specific job.

Privacy policies

Each product has its own privacy policy that describes exactly what it collects and why:

FAQ

Security questions

Where is my data hosted? +

Our applications and file storage run on Microsoft Azure.

Do you store my card number? +

Card payments are processed by Stripe or 360Payments. SpendFlow, which reads receipts, keeps only the last four digits of a card.

Can I get my data out? +

Yes. Ask us at contact@onesoftway.com and we will help you export your records, or delete them when you leave.

How do I report a security issue? +

Email contact@onesoftway.com with “Security” in the subject. Please give us a reasonable chance to fix the issue before disclosing it publicly.