Security

Every shop’s records live in their own database. One shop cannot see another shop’s customers, vehicles or repair orders.

All traffic to the website, the web app and the mobile apps uses HTTPS.

• Passwords are stored hashed, never in plain text
• Sign-in links expire after ten minutes and work once
• Repeated failed sign-ins are slowed down and blocked
• Staff see only what their role allows; the owner controls roles
• Signing out of the mobile app removes that phone from notifications

Card details are handled by Stripe and never touch our servers.

We use a small number of established providers, listed on our subprocessors page.

If you think you have found a security issue, email support@gearboxly.com with the subject "Security". We will look into it promptly. No system is perfectly secure; if a breach ever affected your information we would tell the affected shops and people as the law requires.