Secure accounts
Every account is protected by modern authentication, with session controls and safeguards against common attacks.
Security
Your business records deserve serious protection.
SimpliPilot holds customer details, financial history, and communication records. Here is how that information is protected, written for business owners rather than engineers.
Team permissions
Role-based access decides who can see financials, edit customers, send campaigns, or manage the team.
Multi-factor authentication
Add a second verification step so a stolen password alone cannot open your business records.
Encryption
Data is encrypted in transit and at rest using industry-standard protocols.
Audit history
Sensitive actions—edits, exports, permission changes—are recorded so you can see what happened and when.
Company data separation
Each company's records live behind tenant-level boundaries. One customer's data is never mixed with another's.
Backups and recovery
Regular backups with tested restore procedures, so an accident does not become a business emergency.
Protected API credentials
Integration keys are stored server-side in a secrets manager and are never exposed in the browser.
Data export and portability
Your customers, estimates, invoices, and history are exportable. Leaving should never mean losing your records.
Optional integrations
Nothing connects until you approve it, and any connection can be revoked from your settings.
Role-based access
Everyone sees the work. Not everyone sees the money.
SimpliPilot ships with real roles, so a technician in the field, the person in the office, and the owner each get exactly the access their job needs.
| Area | Owner | Manager | Office | Technician |
|---|---|---|---|---|
| Customers and job history | Included for Owner | Included for Manager | Included for Office | Included for Technician |
| Calendar and assigned work | Included for Owner | Included for Manager | Included for Office | Included for Technician |
| Create and send estimates | Included for Owner | Included for Manager | Included for Office | Not included for Technician |
| Invoices and payments | Included for Owner | Included for Manager | Included for Office | Not included for Technician |
| Accounting and margins | Included for Owner | Included for Manager | Not included for Office | Not included for Technician |
| Marketing campaigns and publishing | Included for Owner | Included for Manager | Included for Office | Not included for Technician |
| Team accounts and role changes | Included for Owner | Not included for Manager | Not included for Office | Not included for Technician |
| Billing, plan, and connections | Included for Owner | Not included for Manager | Not included for Office | Not included for Technician |
| Data export | Included for Owner | Not included for Manager | Not included for Office | Not included for Technician |
Example configuration. Owners can adjust what each role can reach in team settings.
Session security
Access ends when it should.
Most business data loss is not a dramatic breach \u2014 it is an old session on a device nobody thought about.
Device-aware sessions
Signing in from a new device starts a separate session that can be reviewed and ended without changing your password.
Automatic expiry
Idle sessions expire and tokens rotate, so a forgotten tab on a shared laptop does not stay open forever.
Immediate revocation
Removing a team member ends their access right away — their sessions stop working, not just their next login.
Password and recovery hygiene
Password resets are time-limited and single-use, and changing a password invalidates other active sessions.
Being straight with you
Certifications are a goal, not a claim.
SimpliPilot does not currently hold SOC 2, HIPAA, ISO, or PCI certification, and we will not imply otherwise. Formal audits and certifications are on our roadmap as the platform matures, and this page will be updated with specifics—including dates and scope—only once they are genuinely completed.
Reporting and documentation
SimpliPilot is operated by SimpliPilot LLC. Report a suspected vulnerability or security incident to support@simplipilot.com. Please include steps to reproduce and do not access other customers' data.
Related documents: Subprocessors, Data Processing Agreement, Privacy Policy.
Questions from your IT reviewer or partner? Ask us directly.
Start free for 14 days, watch the self-guided demo, or book a live walkthrough with our team.
No credit card required · Full access during the trial · Cancel anytime