Security

Your data, kept apart

• Every company has its own workspace. Each request is checked against the signed-in person’s company and role, so one company can never see another’s apps, records or photos.
• Within a company, roles decide who can build apps, see all records, manage billing or only see their own assigned work.
• AppGena runs on servers we operate ourselves in the United States, not on a shared app-hosting platform. The database is not reachable from the internet.
• Data is backed up regularly, so it can be restored if something goes wrong.

Encrypted connections

The website, the app builder and the field app talk to our servers only over HTTPS (TLS). Sign-in, session and form-protection cookies are marked secure and HTTP-only, so page scripts can’t read them.

Sign-in protection

• Passwords are at least 8 characters and stored only as salted, one-way hashes. Nobody at AppGena can see your password.
• After 5 wrong passwords in a row, the account is locked for a short time to stop guessing.
• New accounts must confirm their email address before signing in.
• Two-factor sign-in with an authenticator app is available on myAccount, and works on both the website and the field app.
• Removing someone from your team stops their access straight away, including syncing to their phone.

Everything is recorded

• The Activity Log records who created, changed, assigned, submitted or deleted what, with the old and new values. Your admins can see it at any time.
• AppGena staff can only open your workspace in a support mode that lasts at most 8 hours. Each visit, and every change made during it, is recorded under the staff member’s own name in your Activity Log.
• Acceptance of our Terms is kept in a log that cannot be edited or deleted.

The field app

• Assigned work is kept in the app’s private storage on the device, which other apps can’t read, so your team can work without a signal.
• The app asks only for the camera, location while in use and notifications, and only when a feature needs them. Pictures are attached through the phone’s own photo picker, so it never gets access to the whole photo library. It doesn’t track location in the background; background sync (about every 15 minutes) only sends and fetches work.
• We recommend a screen lock on every work device. If a device is lost, remove that person or ask us to sign it out.

Payments

Cards are entered on our payment processor’s own secure page (Square, Stripe or Helcim), which are certified to the PCI DSS card-security standard. Card numbers never pass through or get stored on AppGena’s servers; we keep only the processor’s reference, the amount, and the card brand with its last four digits.

If something goes wrong

If we learn of a breach affecting your data, we will tell your company’s owners without undue delay, and within 72 hours, with what we know and what we are doing about it, and we will notify anyone else the law requires.

Subprocessors

These companies help us provide AppGena and may handle personal information for that purpose. We will update this list at least 30 days before a new company starts handling customer data — for example, when we add an email delivery service.

Google Play and the Apple App Store distribute the field app under their own terms; they do not receive your company’s field data from us.

Reporting a security problem

If you think you have found a security weakness in AppGena, please email support@appgena.com with “Security” in the subject and enough detail for us to reproduce it. We will reply within 3 business days and keep you updated while we fix it.

Please act in good faith: only test against your own account, don’t access or change other people’s data, don’t disrupt the service, and give us reasonable time to fix the problem before you tell anyone else. If you follow these rules, we won’t pursue legal action against you for your research.