Walled off per company
Every company on Knox shares one database, and the database itself enforces the walls between them (row-level security). The app doesn’t just hide the rows; there’s no way to ask for them.
- Every table, view and report is checked against the signed-in person’s company.
- Automated tests try to read and change another company’s data, and they must fail before a change ships.
Four roles, checked on the server
Canvasser, project manager, manager and admin each see only what their role allows. The check happens on the server for every page and every number, not by hiding buttons.
- Nobody can raise their own role. Only an admin can make someone a manager or admin.
- Every company always keeps at least one active admin.
Tracked only while clocked in
Location is recorded from the moment a rep taps Clock in until Clock out, and never otherwise. The rep can see that tracking is on and can stop it at any time by clocking out.
- Each rep signs a location-tracking consent in the app before first use.
- The detailed path is kept 90 days, then only a daily summary remains.
An audit trail for the things that matter
Managers and admins get a read-only audit log of sensitive changes: role changes, deactivations, territory and assignment changes, flag overrides, settings, exports, legal updates and account deletions.
- Each knock keeps the raw GPS behind its verification, so disputes come down to evidence.
Where it lives
Knox runs on Supabase (PostgreSQL) in the United States, in AWS us-east-1. Data is encrypted in transit and at rest. The website and dashboard are served over HTTPS from Vercel.
- We don’t sell personal information and don’t use it for advertising.
- Homeowner owner names come from public county records and are shown only to signed-in users of your company.
Export everything, any time
An admin can download all of the company’s data in one zip, without asking us: knocks, leads, properties, territories, day summaries, signed agreements and every contract PDF.
- A rep can delete their own account in the app. Their name, email and phone are removed, and the company keeps its business records without their name on them.
Questions, or found a security problem?
Email support@knoxdoor2door.app. A real person on the Knox team answers, and security reports go to the front of the line.
This page describes how Knox works today. Knox does not currently hold SOC 2 or ISO 27001 certification. If your company needs a security questionnaire filled out, email us.