Trust and security
Your data, kept safe
You keep your orders, prices, applications, your operatives' details and their pay in The Subcontractor Desk. This page sets out plainly where that data is kept, who can see it, how it is protected and how you get it back.
Where your data is kept
- The software runs on Google Firebase, part of Google Cloud. Your company's database and file storage are stored in the UK, in Google Cloud's London region.
- Each company's data is kept apart by rules in the database itself, not only on screen.
Who can see it
- Only the users your admin invites can open your company.
- Each user signs in with their own account, using an email and password, or Microsoft sign-in where your company uses it. There are no shared logins.
- Admins choose each user's role: admin; editor, who runs tenders, prices, orders, cash and compliance; site user, who records progress, daywork and delays; viewer, who can look but not change anything; or operative.
- Operatives see only their own weeks and pay, never your rates, the main contractor's prices or anyone else's pay.
- Changes are recorded with who changed what and when, in Recent changes in Settings, and each week of work and pay keeps its own history of who sent, checked and approved it.
How it's protected
- Encrypted in transit: every connection to the app and the website uses HTTPS.
- Encrypted at rest: data stored in Google Cloud is encrypted by default.
- Sign-in is handled by Google Firebase. Passwords are only ever stored in scrambled form by Google, never by us.
- The website and the app are served through Cloudflare.
Your data is yours
- Export your orders, applications, variations and cash forecast to Excel at any time from Settings, and pay runs and invoices for Xero or Sage.
- If you decide to leave, you can export everything before you cancel. After a plan or trial ends, your data stays read only for 90 days so you can still download it, then it is deleted.
- We delete your company's data sooner if you ask us to.
- For the personal details in your records, such as contacts at main contractors and your operatives, your company is the controller and we act as your processor.
Our website
- Visitor statistics are cookie-free (Cloudflare Web Analytics). The website sets no tracking or advertising cookies.
- Forms on the website, such as Book a demo and Join the pilot, are sent via Formspree to hello@thesubcontractordesk.co.uk.
- Fonts load from Google Fonts. Our privacy notice has the detail.
Supplier questionnaires
- If you need our security answers for a supplier questionnaire, ask us. Email hello@thesubcontractordesk.co.uk, or mention it when you book a demo.