Security · Carbonset, quote follow-up for trades and shops
Your customers' phone numbers are not our product.
Carbonset holds names, numbers, addresses, signatures and deposit records for the people you quote. Here is where that data goes, who can see it, and what we do when something breaks.
Where the data goes.
Categories, not company names. Current subprocessors are listed below.
Six commitments.
TLS 1.2 or newer in transit. AES-256 at rest, backups included.
Two engineers can reach production data, through single sign-on and hardware keys. Every access is logged.
Card numbers are typed into the processor's page, never ours. We keep the last four digits and the receipt.
We text your customers for you and nobody else. STOP works across every quote from your company.
Nightly, kept 30 days, test-restored once a month.
Close your account and we delete your data within 30 days. We remind you to export, twice.
Inside your account.
| Role | Can see | Can change |
|---|---|---|
| Owner | Everything, including billing | Everything |
| Office | All quotes and customers | Quotes, price book, cadences |
| Estimator | All quotes | Their own quotes |
| Field | Their own drafts | Drafts, photos and notes |
Every change to a price, a quote or a cadence is logged with a name and a time.
Who handles it for us.
| Category | What they handle | Region |
|---|---|---|
| Hosting and database | All account data | US East |
| Email delivery | Quote and follow-up emails | US |
| Texting gateway | Phone numbers, text bodies | US |
| Payments processor | Deposits, refunds | US |
| Error monitoring | Error reports with names removed | US |
| Support desk | Your emails to us | US |
We name each company on request and give 30 days' notice before adding one.
Found something?
Email security@carbonset.example with steps to reproduce. We reply within one business day, we won't take legal action over good-faith research, and we'll tell you when it's fixed.
Buying for a bigger company?
Send your security questionnaire to security@carbonset.example. We fill them out ourselves, usually within a week.
Questions about data? Call us.
(718) 555-0148, Monday to Friday from 7:00. Ask for Dana or Wen; they wrote this page.