How DispatchMind protects your data
Your jobs, customers and money are your business. Here is how DispatchMind protects them, in plain words.
Each company's data is kept apart
- Every company has its own space. The database itself refuses to show one company's rows to another company's logins, on every table, for every request.
- Only the logins a company creates can see its data. We don't sell information and we don't show ads.
Strong sign-in
- Face ID, Touch ID or fingerprint sign-in (passkeys). The private key never leaves the person's device.
- Two-step codes from an authenticator app.
- Owners can require Face ID, fingerprint or a two-step code for every owner and admin.
- When a login is switched off, it loses access right away, everywhere.
- Roles: owner, admin, office and view-only. Techs get their own app and see only their own jobs, with access levels the owner sets.
Card payments
Card payments run through Stripe. Card numbers go straight to Stripe and never touch DispatchMind's servers.
Encrypted in transit and at rest
- Every page and every connection uses HTTPS, and browsers are told to never connect without it.
- Data is stored with our database provider, encrypted at rest.
- Service keys are kept in encrypted secret storage, never in our code.
Backups
The database is backed up every night, encrypted. Each backup is restored into a separate test database to prove it works, and recent backups are kept off-site.
Activity log
Owners and admins can see who added, changed or removed what, and when, and download it as a spreadsheet. The log is written by the database itself, so it can't be skipped or edited from the app.
Monitoring
Background work is checked every hour through the business day, and the owner's phone gets an alert when something needs attention. Anyone can check the status page.
AI
The AI Dispatcher, the built-in assistant, runs on Anthropic's Claude: on DispatchMind's key for the free trial and the add-on, or on the company's own key if it connects one. Information goes to Anthropic only when someone in the company asks the AI Dispatcher something, and only what that question needs.
Connecting other systems
API keys act as the login that made them, see only what that login can see, and can be revoked at any time. Webhooks are signed so your systems can check they came from DispatchMind. See the developer page.
Who else handles your data
DispatchMind uses a short list of outside services. Each one gets only what its part of the job needs.
| Service | What for | When |
|---|---|---|
| Cloudflare | Hosting and network protection | Always |
| Supabase | Database and sign-in, in US East | Always |
| Stripe | Plan billing and card payments | Billing always; card payments when your company turns them on |
| Resend | Sign-in and password emails | Always |
| Apple | Maps and address lookups, iPhone notifications, Sign in with Apple | When those features are used |
| Sign in with Google | Only for people who choose it | |
| Anthropic | The AI Dispatcher | Only when someone in your company asks it something |
| Your own accounts | Your phone provider, email, calendar, QuickBooks, CompanyCam and others | Only the ones your company connects |
If you leave
- No contract. The owner cancels from Plan and billing, and the company keeps full use until the end of the period it paid for.
- Ask support@dispatchmind.ai for a full copy of your company's data and we send it.
- The owner can delete the whole company account. Deleted data is then cleared from backups as they age out.
Security questions and reports
- Need a security questionnaire filled out for your company? Write to support@dispatchmind.ai with "Security" in the subject.
- Found a security problem? Tell us at support@dispatchmind.ai with "Security" in the subject. Please give us time to fix it before sharing it. We answer every report.
DispatchMind does not hold a SOC 2 report today.