Built in Australia for AU and NZ trades
Security and data controls
AtmoJob is job management software for trade and field service businesses in Australia and New Zealand.
This page sets out where your data is kept, who can see it, how people sign in, what happens to a lost phone, and how you get your data out, so you can answer a client's security review.
Free while in beta. No credit card.
Answer your client's security review
Builders, facility managers, councils, utilities and insurers often send a security questionnaire. Here are the questions they ask most, with a short answer and the page with the detail.
Question
Where is data stored?; Short answer: On servers we manage in Australia. Our privacy policy lists each service provider and where it is.; Detail: Privacy policy
Question
Is multi-factor sign-in available?; Short answer: Yes. Authenticator app codes, required per role, or your identity provider through single sign-on.; Detail: Sign-in rules, below
Question
Do you support SSO and SCIM?; Short answer: Yes. SAML single sign-on and SCIM user sync.; Detail: Single sign-on and SCIM
Question
Is data on mobile devices encrypted?; Short answer: Yes. The AtmoJob app's database on the phone is encrypted.; Detail: On-device encryption
Question
Can you wipe data from a lost device?; Short answer: Yes. An admin wipes AtmoJob data from the web app.; Detail: Remote wipe
Question
Is access by role?; Short answer: Yes. 9 roles, built for trade businesses.; Detail: Roles and permissions
Question
Do you keep logs?; Short answer: Yes. A wipe log, group history, an email log, a webhook delivery log and a change log on each job.; Detail: Records you can check, below
Question
Can we export and delete our data?; Short answer: Yes. Export at any time, and delete your workspace with 30 days to change your mind.; Detail: Get your data out, below
Question
How do you handle a data breach?; Short answer: We follow the Notifiable Data Breaches scheme.; Detail: Privacy policy
Answering a client's security questionnaire?
Free while in beta. No credit card.
Where your data is kept
AtmoJob is built in Australia, for trade businesses in Australia and New Zealand.
Our main database, file storage, sign-in service and sync service run on servers we manage in Australia.
All traffic to and from AtmoJob passes through Cloudflare's network for security and speed.
Some service providers we use, for example for crash reports and maps, are in the United States and other countries. Our privacy policy lists each one, what it receives, and where it is.
We do not sell personal information, and we do not send your data to any AI provider.
Roles and permissions
An apprentice does not need to see your invoices, and your bookkeeper does not need to dispatch jobs.
Roles built for trades
Owner, Admin, Office Staff, Dispatcher, Finance, Field Staff, Field Sales, Contractor and Employee.
Menus and pages follow the role
In the web app, each person sees only the parts their role can use.
Invoices stay hidden on the phone
For roles that cannot see invoices.
Limit who can work a job type
For example only licensed electricians on switchboard work.
Choose what syncs to phones
Send field phones only the clients related to each person's jobs, or all clients.
Cut access at once
When someone leaves. Deactivate the person, and keep the jobs and records they worked on.
Sign-in rules
Field staff need a quick way in. Your office, and your clients' IT teams, may want more control. You set the rules for each role.
Sign-in methods per role
Email and password, username and PIN, or a one-time code by SMS.
Two-step sign-in
With an authenticator app and backup codes, required per role.
Session length per role
And exceptions for one person.
Admin resets
For a person's password, PIN or two-step sign-in.
Single sign-on and SCIM
Connect Microsoft Entra ID, Okta, Google Workspace, OneLogin or another SAML provider. Requiring single sign-on does not stop field staff signing in with a PIN.
Lost or stolen phones
Remote wipe
An admin wipes the AtmoJob data from a lost or stolen phone from the web app. The wipe happens when the phone next connects, and the phone stays locked out until an admin lets it back in.
Wipe log
Of every request, with who asked and the result.
Automatic wipe
For phones that do not connect for 30 days or more, if you turn it on.
Data on the phone
The AtmoJob app keeps each day's work on the phone, so your team can work with no signal.
Encrypted on the phone
With a 256-bit key kept in the iPhone Keychain or the Android Keystore.
A wipe destroys the key
So data left on the phone can no longer be read.
A security report on the phone
That you can share with your client's IT team.
Secure connections only
The app refuses connections that are not secure.
See on-device encryption and the offline field app.
Records you can check
AtmoJob keeps a record for the actions that matter most.
Wipe log
For every phone wipe, with who asked for it.
Group history
Of who joined and left each crew or depot group, and when.
Email log
That shows if each invoice, receipt or report email was delivered, bounced or failed.
Webhook delivery log
For the events AtmoJob sends to your own systems.
Job log
Of the changes made to each job.
Get your data out
Export when you need it
In settings, ask for an export of all your records, or your records and files. AtmoJob prepares it, and the download stays available for 7 days.
Webhooks
Send events to your own systems when a lead is created, a repeat enquiry joins a lead, a job is completed or closed, or a form is submitted. Each webhook is signed, so your system can check that it came from AtmoJob.
See webhooks and the AtmoJob API and integrations.
Backups and deletion
Backups
We back up our database. Backups are kept for about 9 weeks, then overwritten.
Delete your workspace
The deletion happens 30 days later, and any owner can cancel it in that time. After 30 days, we wipe AtmoJob data from your registered phones, sign out all your users, and delete your records, photos and documents. Deleted data can stay in our backups for about 9 weeks, until they are overwritten.
Staff can delete their own account
In the mobile app.
How we protect our systems
Secure connections
Every connection between your browser or phone and our network uses HTTPS (TLS).
Limited staff access
Access to our production systems is limited to the staff who need it.
Webhooks stay on the public internet
AtmoJob will not send a webhook to a private network address.
Signed webhooks
Each webhook carries a signature made with a secret you can reveal and rotate.
Visitor IP addresses are deleted after 30 days
We keep the IP address of a person who sends a website enquiry form for 30 days to fight spam, then delete it.
Spam checks on our own servers
The model that scores enquiry spam runs on servers we manage, not on an outside AI service.
Location only on duty
The mobile app records a worker's location only while they are on duty, when they take a job photo, and when they start or stop a job timer. Location history is deleted after 90 days.
Data breaches
If a data breach is likely to cause serious harm, we will tell the people affected and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires. If it affects data we hold for your business, we will tell you without delay.
Read the full privacy policy and terms of service.
Frequently asked questions
Still not sure? Book a demo and we will walk you through it.
Where is AtmoJob data stored?
On servers we manage in Australia. Our main database, file storage, sign-in service and sync service run there. Some service providers are in other countries, and our privacy policy lists each one.
Can I control who sees invoices and prices?
Yes. Each role sees only the parts of AtmoJob it needs. Give apprentices and subcontractors the Field Staff, Employee or Contractor role.
Can I make office staff use two-step sign-in?
Yes. Sign-in rules are set per role. You can require two-step sign-in for a role, and let field staff use a PIN.
What happens if a worker loses their phone?
An admin wipes the AtmoJob data on that phone from the web app. The phone then stays locked out until an admin reactivates it, and the wipe log shows who asked for the wipe. See remote wipe.
How long do you keep backups?
About 9 weeks. Database backups are then overwritten.
Can I get all my data out?
Yes. You can export all your records, with or without your files, at any time. You can also send events to your own systems with webhooks.
Do you sell my data or use it to train AI?
No. We do not sell personal information, and we do not send your data to any AI provider.
Can you help with our client's security questionnaire?
Yes. Talk to us through the contact page.
Ask us anything about security.
Book a demo and we will walk you through the controls, or get started free and see them for yourself.
Free while in beta. No credit card. Built in Australia for AU and NZ trades.