Security
How we protect your price book and customer data
Encryption in transit
Traffic between your devices and Tradewright is encrypted with TLS, in the app and on this website.
Encryption at rest
Stored data, including scans, designs, proposals and your price book, is encrypted at rest.
Role-based access
Account owners decide who can see and edit what. Advisors work their own jobs; admins manage users, price books and settings.
Your data belongs to you
Your price book, your customers and your job data are yours. We use them to run the service for you, not to sell or share with other contractors.
Payments through PCI-compliant partners
Card and financing details are handled by PCI-compliant payment and financing partners.
Export on request
Ask and we will export your data, including customers, jobs and price book, in a standard format.
Compliance status
We do not claim certifications we have not earned. Tradewright does not currently hold a SOC 2 report or other third-party security certification. If your company requires a security review, we will complete your questionnaire and walk through our practices with your team.
Subprocessors
We use a small number of vendors to host the service, process payments, send email and manage customer relationships. Each one handles only the data it needs for its job.
Responsible disclosure
If you believe you have found a security vulnerability in Tradewright, please email our security team with a description and steps to reproduce. Give us reasonable time to investigate and fix the issue before sharing it publicly.
Until a dedicated address is live, write to hello@tradewright.io with "Security" in the subject line.
Security questions
Who owns my price book and customer data?
You do. We process it to provide the service to your company. We do not sell it and we do not share your pricing with other contractors.
Can I get my data out?
Yes. Request an export and we will provide your customers, jobs and price book in a standard format.
Is Tradewright SOC 2 certified?
Not today. We will publish our compliance status on this page as it changes, and we are happy to answer a security questionnaire as part of an evaluation.
How do I report a vulnerability?
Email our security contact listed on this page. Please include steps to reproduce and give us reasonable time to fix the issue before disclosing it.
See also our privacy policy and terms of service.
Bring your security questions to the demo.
We will show how access, price books and payments work, and answer your questionnaire.