Your subcontractors' documents, actually protected

Every request to TradeGuard travels over HTTPS/TLS, and HSTS tells browsers to refuse an unencrypted connection outright. Certificates and W-9s never cross the wire in the clear.

Billing runs entirely through Stripe. Your full card number never touches (and is never stored on) our servers. PCI compliance is Stripe's job, not something we improvise.

Account passwords are hashed with bcrypt. We can't read them, we can't email them back to you, and a database dump would not reveal them. Password resets use one-time, expiring links.

Uploaded COIs, W-9s, and licenses are stored in private, organization-scoped storage. One customer's documents are never reachable by another customer's account.

No advertisers, no data brokers, no resale. We also do not use your documents to train AI models; the optional extraction feature only reads a file when you ask it to.

Export your full roster and records to CSV anytime; your data is never held hostage. Cancel and request deletion whenever you want; we permanently delete on request.

The application and your data are hosted in the United States with continuous, streaming backups, so a bad day for a single machine isn't a bad day for your records.

The optional QuickBooks Online connection uses read-only accounting scope only, never bank, payroll, or employee data. Disconnect and the access tokens are revoked and deleted.