Security at OnPoint
Security you can check.
What OnPoint does to keep your business's data safe, what we don't claim, and where you can check each line. In plain English, and kept in step with the product.
14 days free, no card. Then £19 a month for you and £9 for each person you add.
OnPoint · Security ledger
Checked 28 September 2026
What we do
Keep each business's records walled off from every other business, in the database itself.
Let you decide what each person on your team sees, with 154 switches.
Give customers, tenants and subcontractors a link that opens their part of your business and nothing else.
Send card details straight to Stripe. They never reach OnPoint.
Record every time OnPoint views the app as you, and tell you on request.
What we don't claim
UK-only hosting. Your data is mainly held in the UK and EU, and some of our providers also work in the US.
Two-factor sign-in for your team. OnPoint's own staff must use it. Your accounts can't switch it on yet.
A tamper-proof audit trail of every change anyone makes.
A backup every 24 hours. Our database provider runs the backups, kept on a rolling cycle.
A security certification such as Cyber Essentials, ISO 27001 or SOC 2.
01Your team
Your team sees what you let them see.
Each person has a role, and a role is a set of switches, 154 in all. Turn one off and that part of OnPoint is hidden for everyone in the role. Pick a starting role to see where six of them begin.
- Prices hidden from engineers, on screen and on the PDFs they download
- Customer phone numbers and emails hidden, with the address kept so they can get to the job
- Shift lock hides sensitive details, or locks the app, while someone's off shift
- Nobody can give a role more than their own role has
Roles & permissions
- View prices and totals on sales documentsOff
- See customer phone numbersOn
- See customer email addressesOn
- View bank detailsOff
- Export and bulk-download recordsOff
- Delete customersOff
- Invite, suspend and remove peopleOff
The owner always has every switch. Change any of them, or make your own roles, in Settings.
02Links you send
One customer, one property or one job. Nothing else.
Customers, tenants and subcontractors don't need an account. They get a private link, and each kind of link reaches only its own part of your business. Pick one to see exactly what it opens.
Only sent if you choose to tell the site contact about a visit or a certificate.
Elm Heating
Flat 2, 19 Hyde Park Road
Appointments and certificates for this property, from Elm Heating
- VisitsVisits to this property only
- CertificatesThis property's, like the gas safety record
- Report a repairFor this property, with photos
- Who to ringElm Heating's number, for anything about a visit
This link never opens
- The landlord's quotes and invoices
- The landlord's other properties
- The landlord's phone number and email
- Anything else in your business
Take a link back
If a customer's link reaches the wrong person, open the customer, press Portal and hold to revoke & replace. The old link stops working and you get a new one to send.
Tenants get their own link
A tenant's link is separate from the landlord's, so it can never lead to the landlord's account.
Not a seat, not a login
Customers, tenants and subcontractors use links, so they never count as people on your plan.
03Line by line
The rest of the ledger.
Each line says what we do, what we don't claim, and where you can check it. If a line stops being true, it comes off this page.
Signing in
What we do
Passwords must be at least 10 characters, and the commonest ones are refused. You can sign in with Google instead, and then Google's own two-step check applies if you've switched it on.
What we don't claim
Two-factor sign-in on OnPoint accounts. OnPoint's own staff must use an authenticator app. Your team can't switch it on yet.
Payments
What we do
Card details are typed into Stripe's own payment form and go straight to Stripe. Your customers' money goes to your own Stripe account, and your OnPoint subscription is billed by Stripe too.
What we don't claim
Bank feeds. Matching payments from your bank account is on a waitlist, not live yet.
Where it lives
What we do
Your records, sign-in and files are held by Supabase in the EU and UK. The providers below handle the rest, each listed with its region in the privacy policy.
What we don't claim
UK-only hosting. Some providers, like Vercel, Stripe, Twilio and OpenAI, also work in the US, under the UK's transfer safeguards.
Encryption
What we do
Every connection to OnPoint is HTTPS, and browsers are told to always use it. Supabase, which stores your records and files, documents that it encrypts them at rest with AES-256.
What we don't claim
End-to-end encryption. Your data is encrypted on the way and where it's stored, but OnPoint's servers can read it, because they need to in order to work.
Backups
What we do
Our database provider backs up the database. Backups are overwritten on a rolling cycle, typically within 35 days.
What we don't claim
A backup every 24 hours, or a restore time. We don't promise what we haven't measured.
History
What we do
Appointments and certificates keep an Activity history of what happened to them: booked, sent, signed and so on.
What we don't claim
A tamper-proof audit trail of every change anyone makes. That's a different thing, and OnPoint doesn't have one.
In the app
AI features
What we do
When you use an AI feature, what you give it goes to OpenAI to get the answer. Nothing goes if you don't use one, and your data isn't used to train AI models.
What we don't claim
That AI features stay inside OnPoint. They use OpenAI, in the US.
Who handles your data.
The providers that hold or pass on your business's data, and where they work. We give 30 days' notice before adding a new one.
- SupabaseYour records, sign-in and filesEU / UK
- VercelRuns the app and this websiteEU / US
- StripeCard and bank payments, and your subscriptionUK / EU / US
- ResendEmailEU / US
- TwilioTextsEU / US
- MapboxMaps and routesUS
- OpenAIAI features, only when you use oneUS
- XeroOnly if you connect itUK / EU
04OnPoint staff
When we look at your account.
To fix a problem, we sometimes need to see OnPoint the way you see it. We don't use it to look around accounts, and these are the rules.
These rules are also in our privacy policy and data processing agreement.
Viewing the app as you
- 01Only one OnPoint account can do it, the developer's, and only after a two-factor sign-in.
- 02Every start and every stop is recorded, with the time, the IP address and the device.
- 03When we leave, the session we used is signed out.
- 04Ask and we'll send you the record for your account.
Our support and sales staff
- 01They must sign in with two-factor.
- 02Each person gets named permissions for their job, like answering chat or extending a trial, and nothing more.
- 03They see your account from the outside: the business, who's on the team, the plan and, if their job needs it, which screens people have used.
- 04They can't open your jobs, customers or documents, and they can't view the app as you.
05The paperwork
GDPR, our own checks, and telling us about a problem.
GDPR
For your customers' data, you're the controller and OnPoint is your processor. Our data processing agreement is the Article 28 contract, and it's part of the terms you agree to. There's nothing extra to sign.
We don't sell personal data or use yours to train AI models. If a breach ever affects your data, we tell you without undue delay. After you close your account we keep your data for up to 90 days, in case you change your mind, then delete it, apart from what the law says must be kept.
The privacy policy covers the rest. Data protection questions go to privacy@onpointbusiness.co.uk.
Our own checks
Twice in 2026, in July and September, we went through OnPoint looking for ways in: the database rules, the server, customer links, file storage and the apps. We fixed what we found, the most serious first. We don't publish the details of a problem, before or after it's fixed.
Found a security problem?
Email us with “Security” in the subject. Tell us what you found and how to see it, and give us the chance to fix it before you tell anyone else. We read every report and we'll reply.
Email ussupport@onpointbusiness.co.uk
Where it shows up in the product.
None of this is an add-on. It's all on the one plan, from the first seat. See pricing or how OnPoint compares.
- Roles and permissionsAll 154 switches, job visibility, shift lock, and View as to check a role before you invite anyone.
- Customer portalWhat your customers see through their link: quotes, invoices, certificates and bookings.
- Invoices and paymentsCard and Pay by Bank through your own Stripe account, with no OnPoint fee.
- Tracking and the team mapPositions come only from On my way and finishing a job, never from clocking in.
- Subcontractors and CISSend a job by link, with the customer's price kept to yourself.
Questions people ask.
Anything else? Ring +44 7884 697405 or email us.
Is my data safe with OnPoint?
OnPoint keeps each business's records apart from every other business's in the database itself. Your team sees only what their role allows, customer links open only that customer's documents, and card details go straight to Stripe. This page lists what we do, what we don't claim, and where you can check each line. OnPoint is job management software for UK trade businesses.
Where is my data stored?
Mainly in the UK and EU. Your records, sign-in and files are held by Supabase in the EU and UK. Some of the providers we use, such as Vercel, Stripe, Twilio and OpenAI, also work in the US, and those transfers are covered by the UK's transfer safeguards. The privacy policy lists every provider with its region.
Does OnPoint have two-factor sign-in?
Not for customer accounts yet. OnPoint's own staff must use an authenticator app to reach our admin area. Your team signs in with a password of at least 10 characters, or with Google, where Google's own two-step check applies if you've switched it on.
Can OnPoint staff see my data?
Only to fix a problem. One account, the developer's, can view the app as you see it, after a two-factor sign-in. Every start and stop is recorded with the time, IP address and device, the session is signed out when we leave, and you can ask for the record for your account. Support and sales staff can't do this at all. They see your account from the outside: the business, the team and the plan.
Can my customers see each other's documents?
No. A customer's link opens their own appointments, quotes, invoices, certificates and properties. A tenant's link opens one property's visits and certificates and never the landlord's quotes, invoices or other properties. A subcontractor's link opens one job and never shows what the customer pays you.
What if a customer's link goes to the wrong person?
Open the customer, press Portal, and hold to revoke & replace. The old link stops working and you get a new one to send to the right person.
Do you store card details?
No. Card details are typed into Stripe's own payment form and go straight to Stripe. That's true for your customers paying you and for your OnPoint subscription. Your customers' payments go to your own Stripe account, and OnPoint takes no fee from them.
Can I stop engineers seeing prices or customer phone numbers?
Yes. A role is a set of switches, 154 in all. Turn off prices and totals and they read Hidden on screen and on the PDF. Turn off customer phone numbers and emails and those are hidden while the address stays.
What about GDPR?
For your customers' data, you're the controller and OnPoint is your processor. Our data processing agreement is the Article 28 contract and is part of our terms. We don't sell personal data or use yours to train AI models, we give 30 days' notice before adding a provider, and after you close your account we keep your data for up to 90 days, then delete it apart from what the law says must be kept.
Do you have Cyber Essentials or ISO 27001?
We don't claim any security certification. What we do is written on this page, with where to check each line.
How do I report a security problem?
Email support@onpointbusiness.co.uk with Security in the subject. Tell us what you found and how to see it, and give us the chance to fix it before you tell anyone else.
Try it with your own business.
14 days free, no card. Set up an engineer's role, send yourself a customer link and see what it opens. Then £19 a month for you and £9 for each person you add. Or pay yearly: £228 a year for you and £108 for each extra person.