Security
How Garage OS protects your garage’s records. Only what is in place today is listed here.
Each garage’s records are kept apart
Every garage’s records are kept apart in the database by row-level security: the database itself refuses to return one garage’s records to someone signed in to another.
Signing in
Sign-in uses OpenID Connect with PKCE. Each person has their own account and a role, which decides what they can open.
- Access can be limited by branch, and an audit log records who changed what.
- Technicians don’t see costs and margin.
- An outside business sees only the jobs you send it.
On the way to you
Traffic to Garage OS uses HTTPS, through Cloudflare.
Where your records are kept
The application and its database are hosted by DigitalOcean in London, United Kingdom (the EU treats UK data protection as equal to its own).
Photos and documents
Photos and documents are delivered through short-lived signed links, so a link stops working soon after it is issued.
Backups
Backups are taken daily.
Your records, in your control
- The owner can download a full export of the garage’s records.
- A customer’s details can be exported, or erased, when they ask.
- You set how long leads are kept, and can place a legal hold when records must stay.
Reporting a problem
If you think you have found a security problem, tell us at info@garageos.ie.
See Garage OS in action.
Get a personal walkthrough and see how Garage OS could work for your business. We’ll go through the workflows that matter to your garage.
Request your demo