Server-side scope everywhere
Queries, background jobs, exports, emails, and file paths carry explicit tenant scope. Jobs re-load and re-verify their tenant instead of trusting what was queued.
Security
Tenancy is a security boundary, not a filter.
Service data is scoped to a Brand inside an Organization, enforced on the server for every read and write. Client-supplied tenant identifiers are hints at best; they are never authorization.
Capability checks, not job titles
Access details, internal notes, costs, and payment collection are separate capabilities. A technician who can complete a visit does not automatically get the margin on it.
Sensitive field data
Gate codes and alarm instructions are a separate capability-gated record, and are never written to the mobile application's offline store.
Files stay private
Photos and documents are stored privately and retrieved through signed URLs. Uploads use short-lived, tenant-scoped credentials; the application holds no storage credentials.
Mobile credentials
The iOS application holds short-lived access tokens and rotating refresh tokens in the Keychain, never in ordinary preferences, and never in a URL or a log line. Sessions are listable and revocable.
What we do not claim
Crescove is not certified under SOC 2, HIPAA, PCI, GDPR, or CCPA. We publish no uptime guarantee. Field Service is verified in staging and is not production-verified.
See Field Service & CRM against your own workflow.
Tell us how your business runs today and we will walk through what is available now, what is still being built, and what would need to be connected for you.