Security
Your prices, margins and customers are your business. This page says plainly how we protect them.
Your company's data is walled off
Every company's records are separated inside the database. The database checks who is asking on every request, so one contractor can never read another contractor's jobs, customers or money.
Roles are enforced on the server
Sales reps see their own leads, customer prices and their own commission. Costs, crew pay, payroll and company books are removed before anything reaches a rep's phone. A rep cannot open or change another rep's job.
We never store card or bank numbers
Customer payments run through Stripe. Payment details go straight to Stripe, and money goes to each contractor's own Stripe account. Construction in a Box records that a payment happened, never the card or bank number. A payment only posts to a job after Stripe's signed notice is verified.
No passwords to steal
Everyone signs in with a one-time link sent by email or handed over by the owner. Links work once and expire in an hour. Repeated requests are rate limited.
Every change is logged, and you can take your data with you
Owners see who changed what and when. Owners can download all of their company's data at any time.
Recorded sales visits
- The app asks the rep to get the homeowner's yes before recording, in every state.
- Speech is turned into text on the phone. No audio is saved.
- Visit scores and coaching notes are for the owner only.
- AI drafts messages; a person reads and sends every one.
Who at Construction in a Box can see your data
Our platform staff see company names, plan, counts and usage. To look inside your company to help with a problem, we ask the owner for time-limited permission, and every look is logged.
Paused or unpaid accounts
If an account is paused or unpaid, it becomes read-only. You can still sign in, see everything and download it.
Last updated October 31, 2026. Questions about security? Ask the person who invited you, or your account owner.