Security
Your customer and vehicle data is your business. Here's specifically what CROW does to protect it — no vague assurances, just the practices in place today.
How we protect your account and data
Password hashing
Passwords are hashed with bcrypt before storage — CROW never stores or can recover a plaintext password. A minimum length is enforced at signup.
Optional two-factor authentication
Accounts can turn on TOTP-based two-factor authentication, compatible with apps like Google Authenticator and Authy, with one-time backup codes and rate-limited verification attempts.
Session & token security
Sign-in uses short-lived access tokens with automatic refresh-token rotation. Tokens are stored in httpOnly, secure cookies rather than page-readable storage, and logging out or changing your password immediately revokes them server-side.
Payment security
Card details are entered directly into Stripe, our payment processor, and tokenized there — CROW’s servers handle a Stripe customer and payment-method reference, never a raw card number. Incoming payment events are verified by signature before we act on them.
Encrypted connections
Traffic to the CROW app is served over TLS (1.2 and 1.3), so data in transit between your browser and our servers is encrypted.
Found a security issue?
We want to hear about it. Email support@crowmobile.com with the details and we'll follow up directly.
Try CROW free for 30 days
See it running in your own shop before you decide anything — set up takes minutes, not a sales call.
30-day free trial. Cancel anytime.