Security

Your projects, customer records, and jobsite photos are your business. This page explains, in plain terms, how Mesh8 protects them.

Encryption

All traffic between your devices and Mesh8 — the app, the API, and every file upload — is encrypted in transit with TLS (HTTPS). Your data is also encrypted at rest: our database and file storage both encrypt the underlying disks.

Sign-in and sessions

Mesh8 never stores a password, because there are no passwords to steal. You sign in with your Google account — which brings your own two-factor protection with it — or with a one-time code sent to your phone. Sessions are kept in signed, HTTP-only cookies that scripts in the browser cannot read.

Access control

Access inside a workspace is role-based: workspace owners decide what crew members, office staff, and clients can see and do. Client portal access is scoped to that customer’s own projects — a client can never see another customer’s jobs, pricing, or documents.

Photos and files

Jobsite photos and documents are stored in a private storage bucket that is never publicly accessible. Files are delivered only through signed links that expire within 24–48 hours — so even if a link leaks, it goes dead on its own.

Payments

Card details go directly to Stripe, our payment processor, and never touch Mesh8’s servers. Stripe is a certified PCI DSS Level 1 service provider — the highest level of payment-industry certification.

Backups and infrastructure

Mesh8 runs on managed cloud infrastructure (DigitalOcean and Vercel). Our database is a managed PostgreSQL service with automated daily backups, so your records survive hardware failures.

Your data is yours

You can request a full export of your data at any time — email support@mesh8.app and we will send it in standard formats. If you cancel, we keep your workspace for 90 days so you can still get your data out or reactivate, then delete it. See our Terms of Service and Privacy Policy for details.

Certifications

Mesh8 does not yet hold formal certifications such as SOC 2 — that’s on our roadmap as we grow. What you read above is simply how the product is built today.

Reporting a vulnerability

If you believe you’ve found a security issue in Mesh8, we want to hear about it. Email support@mesh8.app with the details and we will respond promptly. We appreciate responsible disclosure and will not take action against good-faith research.