Security
Last Updated: June 26, 2025
Fieldza by Flintime Inc. ("Fieldza," "we," "us," or "our") provides cloud-based field service management software that helps business customers manage clients, jobs, quotes, invoices, scheduling, dispatching, payments, communications, and related field operations (the "Service"). Fieldza is offered through our the website located at https://fieldza.com and any subdomains thereof (the "Website"), our native mobile application for Apple iOS devices distributed via the Apple App Store ("Fieldza for iOS"), and our native mobile application for Android devices distributed via Google Play ("Fieldza for Android"). The Fieldza for iOS and Fieldza for Android are collectively referred to as the "Apps" or "Mobile Apps." The Website, Apps, and Service are Fieldza products owned and operated by Flintime Inc..
Safeguarding customer data across the Website, Fieldza for iOS, and Fieldza for Android is fundamental to Fieldza. This page describes the security measures we employ to protect your information, applications, and infrastructure.
Our Security Program
- Data encryption: we use industry-standard TLS encryption for data in transit between the Apps, Website, and our servers. Data at rest is encrypted using AES-256 or equivalent standards through our cloud infrastructure providers.
- Access controls: role-based access controls, multi-factor authentication options, and least-privilege principles limit who can access production systems and customer data.
- Secure development: security reviews are integrated into our software development lifecycle for the Website and both Mobile Apps, including code review and dependency scanning.
- Infrastructure security: our cloud infrastructure is hosted with providers that maintain SOC 2 and ISO 27001 certifications. Network segmentation, firewalls, and intrusion detection help protect our environment.
- Monitoring and logging: we monitor systems for anomalous activity, maintain audit logs, and investigate security events promptly.
- Employee training: Fieldza personnel receive security and privacy training and are bound by confidentiality obligations.
Mobile App Security
Fieldza for iOS
The Fieldza for iOS uses iOS Keychain for secure credential storage, supports Face ID and Touch ID for app authentication where enabled, and communicates with Fieldza servers exclusively over encrypted HTTPS connections. App Transport Security (ATS) is enforced.
Fieldza for Android
The Fieldza for Android uses Android Keystore for secure credential storage, supports biometric authentication where enabled, and communicates with Fieldza servers exclusively over encrypted HTTPS connections.
Both Apps may cache data locally for offline use. We recommend enabling device passcodes or biometrics and keeping the Apps updated to the latest version from the Apple App Store or Google Play.
Payment Security
Payment card data is processed by Stripe, Inc., a PCI DSS Level 1 certified payment processor. Fieldza does not store full credit card numbers on our servers. See our Subprocessors page for details.
Incident Response
Fieldza maintains an incident response plan to detect, investigate, and remediate security incidents. In the event of a data breach affecting personal information, we will notify affected users and regulators as required by applicable law.
Report a Security Concern
If you discover a security vulnerability in any Fieldza product, please report it through our Responsible Disclosure program. Do not publicly disclose vulnerabilities before we have had an opportunity to investigate and remediate.
For general security inquiries, contact support@fieldza.com.
Related Policies
See our Legal page for Privacy Policy, Terms of Service, Mobile App Terms, and other policies. Business customers may request our Data Processing Addendum.
Fieldza by Flintime Inc.Attn: Security
254 Chapman Rd, Ste 208 #20381, Newark, Delaware 19702, USA
Email: support@fieldza.com
Phone: (916) 598-0203