Tenant isolation, encrypted credentials and verified backup restores.
Treelocity is engineered so one company can never read another company’s records, field crews only see what their role permits, and customer portal links expose only the documents and photos you explicitly share.
Security controls are enforced at the database and server level across every plan.
Architecture controls
Six layers of defense built into the platform
- Database
Row-level tenant isolation
Every database table enforces strict row-level tenant isolation so queries and updates are locked to your company workspace.
- Access control
Server-enforced role & price privacy
Role permissions and field price-visibility settings are enforced on the server before any data leaves our database—restricted numbers are never sent to unauthorized devices.
- Portal
Secure, expiring customer portal links
Customer portal links return only customer-facing line items and shared photos—internal crew notes, unshared field photos and employee cost rates are excluded.
- Integrations
Encrypted OAuth & webhook verification
QuickBooks Online and Jobber connection tokens are encrypted at rest, and Stripe, Twilio and Resend webhooks verify cryptographic signatures.
- Resilience
Verified database backup restores
Automated backup tests regularly restore into an isolated environment to verify that all company records, permissions and account settings recover cleanly.
- Integrity
Strict workflow & money guards
Estimate totals, sales tax and invoice amounts are calculated and verified on the server; duplicate invoices and negative line items are blocked automatically.
Explore further
Related trust & compliance pages
Common questions
Security questions
Practical answers for tree-care owners evaluating or configuring Treelocity.
Does Treelocity store raw customer credit card or bank account numbers?
No. All payment methods for both your Treelocity subscription and your customers’ invoice payments are tokenized and processed directly by Stripe.
How do you prevent a crew member from viewing company financial reports or hourly cost rates?
Database access policies check the signed-in user’s role and permissions on every request, blocking unauthorized access to private hourly costs and business reports.
Can a homeowner use their customer portal link to see other clients or jobs?
Never. Each portal link is scoped strictly to that client’s shared documents and property tree inventory, with automatic expiration on estimate quotes.
How do we report a security question or request a vendor review?
Email security@treelocity.com and our engineering team will respond within one business day.
Get started
Evaluate Treelocity with confidence.
Start a 14-day trial or contact security@treelocity.com with security questionnaire inquiries.