Security

Ramrod Field Management · last updated 14 October 2026

The short version. Each company's records are walled off from every other company's, every connection is encrypted, people see only what their role needs, and every change to a record is written to a log that cannot be quietly edited.

Separation between companies

Every business using Ramrod is its own tenant. A company cannot see another company's customers, jobs, messages or money. Customer Candor, the shared site-safety network, is the one place records cross between companies, and it carries building conditions only — no names, phone numbers or email addresses, and not which company recorded them. Sharing is off until a company turns it on, and there is no public search.

Access

Encrypted connections (HTTPS) on every page and every API call.
Named accounts with role-based permissions — a technician sees the jobs they are working, not the whole ledger.
Account recovery uses single-use tokens that expire in fifteen minutes and are stored hashed.
One sign-in cookie. No advertising or third-party tracking cookies.

Records you can trust

Actions that touch a record are written to an append-only, tamper-evident activity log.
Customer-facing pages are filtered so trade-only details — manufacturer account numbers, internal routing notes — never reach a homeowner's screen.
Links sent to customers carry a random code and nothing personal, and they expire.

Payments

Card payments are handled by the payment processor (Stripe). Neither Ramrod nor the business using it sees or stores a card number.

Changes to the software

Every release runs an automated test suite of more than 5,800 tests where it will run. If the release does not start cleanly, the previous version is put back automatically.

Self-hosting

Ramrod can run on a server the company owns, so its records stay on hardware it controls.

Reporting a problem

If you believe you have found a security issue, email dustinb@aresllc.co. Please do not test against other companies' data. We will acknowledge your report and keep you informed.