Security

Handover is built to hold a list of who has what, not the keys themselves.

What we store

• Names, work emails and job titles of the people on your team.
• The names of the apps, shared logins, devices and keys you track, and who has each one.
• A log of every step: what was done, by whom, and when.

What we never store

• Passwords, door codes or alarm codes. Handover records that a password exists and when it was last changed, never the password itself.
• Logins to your other apps. Handover doesn’t connect to them.

How it’s protected

• Encrypted connections (HTTPS) everywhere.
• Passwords for Handover itself are hashed with bcrypt.
• Every form is protected against cross-site request forgery, and every page checks that you belong to the business you’re viewing.
• The activity log can’t be edited from the app.

Questions or a security report: robbyjsocials@gmail.com.