Who can see what, stated exactly.

Every record carries its company

Punches, sites, units, photos, receipts and settings are stamped with the company that owns them, and every read is filtered by that company on the server.

Enforced server-side, not in the app

The phone never decides what it is allowed to see. A token from one company cannot reach another company's data even if the request is crafted by hand.

Managers manage

A manager sees who was on the property, what was done, the photos, the sign-off and the hours logged against their own units. Rates, wages and pay weeks are never part of that read, at any tier, with no setting that enables it.

Vendors work and run their own payroll

A vendor sees their own crew, hours and compensation across every client they work for. That side is theirs by construction, not a permission a manager grants.

Owners read

An owner reads less than a manager: property activity and finished records, never payroll, never edits.

Their own hours only

A tech sees their punches, their jobs and their receipts. Crew members cannot see each other's hours or pay.

Admins see the company

Whoever holds the admin role sees all hours, approves timesheets and expenses, and edits punches. Every edit is written to an audit trail with who changed what.

Only at the punch

A location fix is taken at punch in and again at punch out. Nothing is collected between those two moments, and nothing runs in the background.

Stored as distance and grade

What the record keeps is the fix, its accuracy and the distance to the job site, used to verify presence, not to trace a route around town.

Read-only and revocable

Shared records are read-only links you can kill at any time. They expose one property and one week.

Scoped by construction

Pay rates, other properties, other clients and other techs' timesheets are not part of the shared record.

Your history stays yours

Records and photos are kept for the life of the account so last year's record is still provable this year.

Export on demand

Any property's week prints to a clean sheet, and account data can be exported on request.

Deletion on request

Ask and an account and its data are removed. Records already shared with a client are revoked at the same time.