Company data kept separate
Each company works in its own protected workspace. Access checks are applied when people view, create or update equipment, work orders and other company records.
Security
How we protect your maintenance data
Security should be understandable. PreventiveHQ limits who can see each company's records, protects account and billing changes, checks uploaded data and records important activity. We also test backups and service recovery so protection goes beyond the sign-in screen.
Safer sign-in
Verified email, two-factor authentication and passkeys help protect accounts. Mobile access uses secure tokens that can be revoked if a device is lost.
Protected billing
Dodo Payments handles secure checkout. PreventiveHQ verifies billing updates before changing a plan and prevents a repeated notification from charging or updating an account twice.
Change history and private keys
Important changes are recorded so your team can understand what happened. Passwords, payment keys and other sensitive values are kept out of logs and product code.
Protected request forms
Public maintenance requests are protected against spam and automated abuse. A request link never exposes the rest of your equipment list.
Tested before release
Product updates are checked for access control, invalid input, interrupted actions, mobile layouts, accessibility and service failures before release.
What we verify regularly
We check secure browser connections, restore a real backup, test scheduled jobs and alerts, verify checkout and email delivery, scan code for exposed secrets and known security problems, and confirm that one company cannot access another company's records. The offline mobile app remains in early access until its device and data-loss tests pass in real field conditions.
Report a vulnerability privately to security@preventivehq.com. Please do not test against customer data or disrupt service.