Security

RoofGo holds your pricing, your pipeline and your customers’ addresses. This is how we look after them.

Your data is yours alone

Every roofing company on RoofGo is a separate workspace. Every request is checked against the signed-in person’s company and role on the server, on every request. Another company can never see your properties, estimates, pricing or team, and that rule is enforced in the database queries themselves, not just hidden in the interface.

Accounts

• Passwords are stored as salted scrypt hashes. We never see or store your password.
• Sign-in links, invitations and reset links are single use, short lived, and stored only as hashes.
• Repeated failed sign-ins lock the account temporarily.
• Removing someone from your team takes effect on their very next action, on every device.

Homeowner links

A shared estimate link shows exactly one estimate and nothing else. Links are long random values or short codes from a large random space, they are excluded from search engines, and you can disable them.

Payments

Card details go directly to Stripe. RoofGo never receives or stores card numbers.

Audit trail

Changes to your team, pricing, billing and settings are logged with who made them. If RoofGo staff ever need to access your account to help you, that access is recorded too.

Reporting a problem

If you believe you have found a security issue, contact us through the contact page and we will respond quickly.