Security & Your Data
How WaterMark protects your company and customer data
A plain-language rundown of the safeguards built into WaterMark so you can answer a homeowner or a worried owner with confidence. No jargon, just what is actually true.
Where: Account menu (bottom-left sidebar) -> Account settings, and -> Your data & account
- Know that traffic is encrypted in transit: everything between your browser or the field app and WaterMark travels over an encrypted (HTTPS) connection.
- Trust that each company is walled off: your company's data is isolated from every other company on WaterMark; one company can never see another's customers, jobs, or invoices.
- Understand card handling: when you connect Stripe, card numbers are handled by Stripe and are never stored on WaterMark's servers.
- Rest easy on connected accounts: tokens for connected services like QuickBooks are stored encrypted, not in plain text.
- Turn on two-factor authentication for owners and office staff for a second layer at sign-in (see the dedicated article).
- Rely on nightly off-site backups: your data is copied to secure off-site storage every night so it can be restored if something goes wrong.
Good to know
- If a homeowner asks 'is my info safe?', the honest short answer is: card numbers live with Stripe (never with us), your data is encrypted in transit and isolated from other companies, and it's backed up nightly.
- WaterMark does not currently hold formal certifications like SOC 2 - don't claim one. Describe the actual safeguards above instead.