Security at Field Handle
Last updated: October 18, 2026
Trade businesses trust Field Handle with their schedules, customers, workers and payments. This page explains how we protect that information.
Where your data lives
- Field Handle runs on Google Cloud (Firebase). Your data is stored in Google data centers in the United States, replicated across multiple regions, and protected by Google's physical and infrastructure security.
- We don't run our own servers.
Encryption
- Every connection to Field Handle uses HTTPS (TLS). fieldhandle.com enforces it with HSTS.
- Your data is encrypted at rest by Google Cloud.
- Keys and credentials for the payment services we connect to are kept in Google Secret Manager, never in our code.
The most sensitive data never reaches us
- We never collect or store Social Security numbers, bank account numbers, card numbers or photos of IDs.
- Our payment processor, Stripe, collects that information directly in its own secure forms. Stripe is certified as a PCI DSS Level 1 service provider, and card details never touch our servers.
Your account
- Passwords must be at least 12 characters and are checked against lists of known breached passwords, following NIST guidance.
- You can turn on two-step verification with an authenticator app or, where available, a text message. One-time recovery codes are included.
- We email you when your account signs in on a new device, and you can sign out of all devices at any time.
- Email verification, plus optional phone verification.
Who can see what
- Each company's data is kept separate from every other company's. Our servers enforce this, not just the app screens.
- Inside a company, admins choose what each worker can see. By default, workers see their own jobs, schedule and pay.
- We test these access rules automatically before changes go live.
Backups and reliability
- Our database is replicated across multiple US regions.
- Point-in-time recovery and daily backups are turned on.
If something goes wrong
- We keep logs of our systems, and we never log passwords or other secrets.
- If we learn of a security incident that affects your data, we'll investigate right away and notify you as the law requires.
Report a security issue
Email info@fieldhandle.com with "Security" in the subject line, and we'll get back to you promptly. When testing, please don't access other people's data or disrupt the service.
More
Devoted Clean Corp · info@fieldhandle.com