Security
How we protect the information that runs your business.
Tenant isolation
Every record carries your business identifier and every query is scoped to it. Staff of one business can never read another business's data — including on the TRAIDE Marketplace, where only the profile you choose to publish is visible.
Authentication
Passwords are hashed with bcrypt, sessions use short-lived tokens with rotation, and repeated failed logins lock the account. Customer and subcontractor portals use signed, expiring links that expose only what that person needs.
Encryption
TLS 1.2+ for all traffic. Data and files are encrypted at rest. Secrets are stored in managed configuration, never in code.
Audit and immutability
E-signatures and approvals are stored with a document hash, timestamp and IP address and cannot be edited. Activity on jobs, invoices and settings is written to an append-only log.
Payments
Card payments are processed by Stripe; TRAIDE never stores card numbers. Payouts go directly to your connected account.
Backups and recovery
Databases are backed up daily with point-in-time recovery. Files live in redundant object storage. We test restores regularly.
Responsible disclosure
Found something? Email security@traide.app. We acknowledge reports within two business days and do not pursue researchers acting in good faith.