Posture a buyer can put in a packet. Not a diagram of our internals.
This page is for owners, IT, and insurers. It states how we isolate workspaces, encrypt data, and handle access. It does not publish implementation internals or vulnerability tickets.
Workspace isolation
Each contractor organization is a separate workspace. Users sign into their company, and workspace separation is enforced with database row-level policies that our isolation audit program reviews continuously.
Encryption in transit and at rest
Data moves over TLS. At-rest storage encryption is handled by our managed database layer, and application-level field encryption is on the roadmap. We do not store payment card data on Rooflyzer servers.
Least-privilege roles
Owner, sales, production, office, and accountant views. Billing, domain, and workspace settings stay with administrators.
Identity
Email and password, Google sign-in, and phone sign-in. Sessions are designed for a multi-user office. Two-factor authentication is on the roadmap.
Edge protection
A web application firewall and bot controls sit in front of public forms and application login.
Auditability
Sensitive actions on leads, money, and access can be reviewed by administrators. We do not publish log schemas or runbooks on this site.
Vulnerability process
We patch dependencies and accept responsible disclosure. Critical patches are applied promptly. We do not publish vulnerability tickets here.
Buyer packet, not a diagram
Security questionnaires and DPA review happen with the team. This page states posture. It does not publish infrastructure names or implementation internals.
SOC 2 is on the roadmap
We will not put a certification badge on this site until a report exists. Data export is covered by the public Data Freedom Pledge. Send a questionnaire to support@rooflyzer.pro and we will answer the packet.
- Data belongs to you. Export or delete your records at any time.
- Roles limit who can see billing, jobs, and workspace settings.
- TLS in transit. Isolation audited.
- WAF and bot controls in front of public forms and login.
Enterprise path
Need invoice, DPA, or SSO?
Business at $99 per active user per month has no user cap and includes white-glove onboarding. Procurement questions go through the Enterprise page, not a public internals dump.
Enterprise overview