How Your Data Is Protected

Your Company Has Its Own Database

Every company that uses MountDev Ops gets its own separate database, its own file storage, and its own encryption key. Your data is never stored in a shared database alongside other companies' data, and nothing in MountDev Ops can read two companies' data at once.

Encryption

• In transit: every connection to MountDev Ops uses HTTPS, including the live connection that keeps your screens up to date.
• At rest: your database and files are encrypted on disk by Cloudflare, which runs the servers MountDev Ops is hosted on.
• Your own key: on top of that, your company's data is encrypted with a key that belongs to your company alone. Only your company's own workspace can use it.

Cascadia Web Services Cannot Open Your Data

We host and manage MountDev Ops, and we built it so that we cannot see what you store in it.

• No staff access: none of our staff screens, tools, logs, or admin pages can show your records. There is no "log in as the customer" button.
• What we can see: your version, whether your workspace is healthy, how much storage you use, and the counts we bill on. We never see the records themselves.
• No record contents in logs: error reports and logs never include what you have stored.
• Proven on every release: before any update is published, automated tests confirm that no page, tool, or connection returns your data unless someone from your company is signed in.

Email to Your Support Addresses

When Helpdesk takes in email for your company, the message goes straight to your company's own database, unread along the way and never logged. Cascadia only records which of your addresses deliver to your workspace. Replies go out from your own addresses.

One Helpdesk link reaches your workspace without a sign-in, and it does one thing only:

• Upload links you send a client add their files to that one ticket. Each link is signed so it cannot be forged, expires, and can be turned off at any time.

Files on tickets are kept in your company's own database, and open only for people signed in to your workspace who may see the ticket.

If You Want Our Help Inside Your Account

Sometimes you may want us to look at something with you. You stay in control:

• An owner or admin of your company grants a named person at Cascadia Web Services temporary access, for a set length of time.
• You can end that access at any time.
• Everything that person does is recorded in your activity log, which only your company can read.

Without that grant, nobody at Cascadia Web Services can get in.

Updates Never Change Your Data

We update MountDev Ops regularly, and updates never remove or change what you have stored:

• Additions only: updates can add new things, like new fields or new features. They never delete, rename, or rewrite your existing data, and an automated check blocks any update that would.
• Tested against sample data: before an update is published, it runs against a full set of sample company data. Every existing record must come through exactly unchanged, or the update is stopped.
• Restore point first: your workspace gets a restore point before every update.
• Your choices stay yours: your setup, including your modules, fields, automations, and layouts, stays exactly as you made it. New features arrive as options you can turn on.

Your Data Is Yours to Take

You can export all of your data at any time. There is no lock-in.

No Tracking

MountDev Ops has no analytics, tracking pixels, or third-party scripts watching what you do. The only outside service the workspace can load is our own support chat, and only when you open it.