Data security and role-based access control for collision repair shops

Row-level security enforced at the database level on every query, not just in the application layer. Four roles: Owner, Manager, Estimator, and Technician. Complete audit logging of every create, update, and delete action. Workspace isolation so multi-location shops have full data separation between locations. Encrypted storage at rest and in transit.

Four roles built for how collision shops actually work

Owner: full access to all features, settings, billing, and user management. Manager: day-to-day operational access, financial data, reports, and team assignment. Estimator: claim and estimate management, carrier and customer communication, customer QR portal generation. Technician: assigned tasks only, claim context relevant to the job, labor hours logging, no financial data. Role permissions are enforced at the database level on every query so a technician cannot access financial data even by manipulating the URL.

Workspace isolation for multi-location shops

Every operations table, every claim record, every financial entry, and every customer record is workspace-scoped and protected by row-level security. A team member at Location A cannot see Location B's data even if they have the same role. Multi-location owners see data per shop; the reporting layer is what aggregates across shops. Customer A on State Farm cannot see Customer B on GEICO, even by accident. Tenant isolation is enforced in the database, not the app layer.

Authentication, encryption, and suspicious activity detection

Authentication uses industry-standard password hashing and session management. Repeated failed login attempts trigger alerts so the owner can respond to potential unauthorized access attempts. All data is encrypted at rest and in transit using standard encryption protocols. Customer portal QR tokens carry a TTL so a forwarded link does not become a permanent access leak. PII never crosses shop boundaries. Mobile and desktop sessions are synchronized and can be revoked instantly.

Five supporting pillars

  • Row-level Postgres security policies filter every database query to show only data the authenticated user is authorized to see. Even if someone bypasses the UI, they cannot access unauthorized data.
  • Invitation-only access: new users can only join through an invitation from an existing admin. No unauthorized signups. Accounts can be disabled instantly to revoke all access across web and mobile.
  • Every sensitive action is logged with user ID, timestamp, and before-and-after values. The full audit trail is retained for the life of the account and supports DRP audits, carrier inquiries, and dispute resolution.

Key capabilities

  • Row-level Postgres security policies enforced on every query, not just the app layer
  • Four roles: Owner, Manager, Estimator, Technician with database-enforced permissions
  • Complete audit logging: every create, update, and delete with user, timestamp, and before-and-after values
  • Workspace isolation: complete data separation between locations for multi-shop owners
  • Invitation-only access: no unauthorized signups, instant account disable
  • Encrypted storage at rest and in transit with standard encryption protocols
  • Suspicious activity detection and failed login alerts for workspace admins
  • QR portal token TTL so forwarded links do not become permanent access leaks
  • 14-day free trial, no credit card required

Common questions

How does role-based security work in Claimory?

Role-based access is enforced at the database level with row-level security policies. When a team member is invited, the admin assigns a role: Owner, Manager, Estimator, or Technician. Each role has defined permissions controlling what data they can view, create, edit, or delete. Policies apply to every database query. Even if someone bypasses the UI, they cannot access data their role does not permit.

Can I see who made a change and when?

Yes. Claimory keeps a full audit log of sensitive actions: claim creation, supplement submission, role changes, integration connect and disconnect, and customer portal access. Every entry records user ID, timestamp, and what changed. The audit trail is retained for the life of the account and is searchable in-app.

Is security included in the base plan or is it a paid add-on?

Role-based security is included on every Claimory plan starting at $49 per month. Row-level database security, complete audit logging, workspace isolation, and encrypted storage ship on every tier. Advanced role permissions unlock on Elite at $349 per month.