Security
Security, in plain English
Your client list, schedules, alarm codes and pay data are the heart of your business. Here is how Clean Steward is designed to protect them.
Your data stays yours
Every company's data is kept separate at the database level and again in the application. Automated tests check on every build that one company can never see another company's records.
Encrypted in transit and at rest
Connections use modern TLS. Stored data is encrypted, and the most sensitive details — alarm codes, key information, tax IDs — get an extra layer of field-level encryption.
Permissions for every action
Every screen, report, export and AI action requires a specific permission. Cleaners see only their own work. Access codes are hidden unless a role is allowed to see them.
A complete audit trail
Changes record who made them, when, and what changed. Pay and billing history is never silently overwritten — corrections are separate, recorded adjustments.
Backups you can count on
Automated, encrypted backups with point-in-time recovery, and restores that we test on a schedule.
Our team doesn't browse your data
Clean Steward staff have no default access to your records. Support access requires a reason, is time-limited, is visible to you and is logged.
Location data with consent
GPS is collected only while a cleaner is clocked in, with their consent, and kept according to a retention policy.
Designed toward SOC 2
We build with SOC 2 practices from day one — access reviews, change management and audit trails. Clean Steward is not SOC 2 certified today, and we will say so plainly until it is.
Report a security concern
If you believe you've found a security issue, email security@cleansteward.com. Please don't access data that isn't yours while testing.