Security
The current security principles built into MyFieldQuote.
Isolation
Tenant records are scoped to an organization and guarded by membership and role. Staff authentication uses a separate identity and cookie audience.
Protected customer access
Proposal and change-order capabilities are unguessable, hashed at rest, expiring, revocable, version-bound, and tracked without exposing raw tokens later.
Integrity
Accepted documents are immutable; revisions append new versions. Sensitive workflow transitions and operator access are audited.
Reporting
Report suspected vulnerabilities through the contact page using “Security concern.” Do not include exploit secrets or customer data in the initial message.
Authentication and sessions
Tenant, customer-capability, and operator audiences remain separate. Tenant accounts support revocable server sessions, password confirmation for sensitive changes, encrypted TOTP secrets, and one-time recovery codes.
Data and operational safeguards
Private uploads are type/signature checked, tenant-prefixed, checksum verified, and served through authorized paths. Security-sensitive transitions produce audit events; secrets remain outside source control.
Responsible disclosure
Use Contact with the Security concern topic for coordinated reporting. Avoid privacy harm, persistence, destructive testing, denial of service, social engineering, or accessing data beyond what is necessary to demonstrate the issue.