RACECRAFT SYSTEMS

Security

Protocol standard: v1.3

The platforms we build handle live job costing, vendor, and billing data. We apply enterprise-grade security practices to every deployment.

Infrastructure Security

We deploy on established cloud infrastructure providers that maintain SOC 2 Type II and ISO 27001 compliance. All data at rest is encrypted with AES-256, and all data in transit is protected with TLS 1.3.

Application Security

  • Authentication: Hardened session management with support for multi-factor authentication on manager and admin accounts.
  • Access control: Role-based permissions ensure a crew member, estimator, or owner can only view records their role is authorized to access.
  • Data integrity: Job cost and invoicing events are logged immutably, so historical records can't be altered after the fact.
  • Audit logging: Key actions on quotes, costs, and billing records are logged for review.

Payment Security

Racecraft Systems does not store credit card numbers on our own servers. All payment processing is handled through PCI-DSS Level 1 certified providers.

Vulnerability Reporting

If you believe you've found a security vulnerability in our systems or in a platform we've deployed for a client, please email security@innovativeracecraft.us. We respond to all reports within 48 hours.