Security & hosting

Your data stays yours, and stays separate.

Customer records, site details, jobsheets and invoices are sensitive. FireFlow keeps each company's data apart at the database level, checks every permission on the server, and keeps a record of every change.

Your company yourcompany.fireflow… Company B companyb.fireflow… Company C companyc.fireflow… FireFlow, hosted in the EU Roles and permissions checked on the server for every request PostgreSQL database · row-level security Your data only you Company B Company C

Separate workspaces

Each company signs in at its own web address and only ever sees its own data. Separation is enforced by the database's row-level security, not just the application.

Server-enforced roles

Admin, manager, office user and engineer. Every permission is checked on the server, so hiding a menu item is never the only protection.

Two-factor sign-in

Any user can turn on authenticator-app codes, with single-use backup codes for when a phone goes missing.

Hashed passwords

Passwords are stored hashed, never in plain text.

Full audit trail

Every change to jobs, jobsheets, quotes, invoices, contracts and customers, with who made it and when.

EU hosting, nightly backups

Hosted on servers in Germany or Finland and backed up every night. Fully managed, so there's nothing for you to install or patch.

Try it

Who can see what?

Pick a role to see what it can reach in FireFlow.

Access

Two-factor authentication

One more lock on the door.

From Settings → Security, any user scans a QR code with an authenticator app such as Microsoft Authenticator, Google Authenticator or 1Password, enters the code, and saves their backup codes. It takes about a minute.

Two-factor authentication settings

Audit log

A record of everything, for everyone.

Filter by area or person and export to CSV. Combined with the field-by-field jobsheet change log, you can always show exactly what happened, and who did it.

Audit log

Hosting

Hosted for you. Nothing to run.

Where is FireFlow hosted?

On servers in the EU (Germany or Finland), served over HTTPS, with the database backed up every night.

Do we get a copy of the software or database?

No. FireFlow is fully hosted, so there's nothing to install, update or secure on your side. Updates reach every workspace without any work from you.

See it on your own work

Bring a real job. We'll run it through FireFlow live.

A 20–30 minute walkthrough shaped around your company: your callouts, your contracts, your engineers. Then we'll talk about what it would look like for you.