Last updated: 5 November 2026
Where your data lives
On a dedicated server used only for Field Suite, at Fasthosts in a UK data centre. We do not use cloud regions abroad for your data.
Encryption
Every connection uses HTTPS. Payment, Direct Debit, text-message and accounting keys you connect are stored encrypted. API keys are stored only in hashed form and shown once. Sessions are stored encrypted.
Separate accounts
Each business sees only its own data, and every record is checked against your business before it is shown.
Sign-in
Two-step verification for everyone, which an owner can make compulsory for the whole team. Roles for owner, admin, office and engineer. Our own staff console requires two-step verification.
Photos and files
Kept outside the public part of the server and shown only to people allowed to see the job.
Server protection
Firewall open only for web traffic and administration. Administrator access by key only, with no passwords. Automatic blocking of repeated failed logins. Automatic security updates.
Backups
Nightly backups of the database and files, kept for 14 days.
How we release changes
Every change is tested automatically and tried on a separate test system before it goes live.
Your customers' payments
Card and Direct Debit payments from your customers go through your own Stripe and GoCardless accounts. We never see or store full card or bank details.
Location data
Shared only during the working hours your business sets, and deleted after 30 days.
Your data, your exit
Ask for a full copy of your records as spreadsheets and files at any time, and for 30 days after you leave. After that we delete it.
If something goes wrong
We tell affected businesses without undue delay, and within 48 hours under our Data Processing Agreement.
Reporting a problem
Email support@fieldsuiteapp.com with "Security" in the subject.