Security and your data

Your customers’ names and addresses are in here. This is how we treat them.

This page is written for the person in your company who has to sign off a new supplier, and for the installer who just wants to know their customer list is not going anywhere. It says what Installa does today. Anything not on this page, ask us and you will get the answer in writing.

Kept separate

One installer’s records are never another’s.
Signing in

Two-factor, sign out everywhere, and a sign-in history.
A record kept

Who changed what, and deletions that can be undone.
Yours to take away

CSV and the API while you are here, deletion when you go.
Who can see what

Your company’s data is yours alone

Every installer’s customers, jobs, quotes and products are kept separate from every other installer’s by the software itself, not by a setting somebody could get wrong. A link to another company’s job, guessed or mistyped, returns nothing.

  • Roles for Admin, Manager, Sales, Designer and Installer, plus roles you define, decide who sees and changes what inside your company.
  • Customers see only their own job, through a page opened with a link sent to their email address. They never sign in to Installa itself.
  • Access by our own people is limited to what running and supporting the service needs.
  • We never show one installer what another installer does, fits or charges.
Signing in

A lost phone is not a lost customer list

Most breaches of small-company systems are a password reused from somewhere else. Installa gives you the tools to make that not matter, and an administrator can see who signed in and when.

  • Two-factor sign-in with an authenticator app and recovery codes, for any user.
  • Sign out everywhere: one button ends every other session and disconnects the mobile app.
  • A sign-in history for each user, and protection against repeated failed sign-ins.
  • Everything travels over HTTPS, and idle sessions end on their own.
  • An administrator can deactivate a user the day they leave. Their history stays; their access goes.
  • API keys are limited to what each one may do, and can be revoked one at a time.
A record of who did what

Changes are kept, and mistakes can be undone

The same log that settles a warranty question two years on also tells an administrator exactly what a departing employee did in their last week.

  • An audit log of who changed what and when, searchable by person or by record.
  • Deleted customers, jobs, quotes, surveys, tasks, documents, products and team members can be restored by an administrator.
  • Every version of a quote is kept.
Leaving

You can take your data with you

A supplier you cannot leave is a supplier you should not join. Your data is exportable while you are a customer, and deletable when you stop being one.

  • Export your enquiries, customers, jobs, tasks, sales pipeline, sales performance and products as CSV files at any time.
  • The API gives you the same records in a form another system can read.
  • When you close your account, your data is deleted after a grace period, on the timetable in the privacy policy.
Who else sees it

The services Installa uses, and what they get

Installa is built on a small number of outside services: mapping and satellite data for the designer, email delivery, and hosting. Each receives only what its job needs, such as a site’s location or the email being sent. None of them receives your customer list, and we do not sell or share your data with anyone.

If you need the current list of the services we use, or a data processing agreement, ask and you will have it in writing.

What to ask us

If your company needs a data processing agreement, or written answers on hosting, backups and how we would handle an incident, ask. We would rather answer a hard question before you sign than after.

Ask a security question

Found a vulnerability? Please tell support@installa.com before anyone else, and give us a chance to fix it.