Security

Last updated: July 26, 2026

Company isolation

DoorForce is multi-tenant. Product data is scoped to company workspaces. Authorized users access only their company’s Office, Technician, and Customer portal data according to role.

Authentication

Product portals use Firebase Authentication. Access to operational collections is enforced with Firestore security rules and role checks.

Transport & storage

• HTTPS for website and application traffic
• Cloud-hosted Firestore and Storage for operational records and media
• Offline Smart Sync queues on technician devices until reconnect

Operational practices

• Least-privilege roles for office, technician, and customer users
• Photo and document uploads tied to company paths
• Support channels for incident reporting via Contact

Responsible disclosure

Report suspected vulnerabilities to security@doorforceapp.com. Please do not publicly disclose until we confirm a fix.