How Fixory protects your shop
Fixory protects each shop's account and data with hashed passwords, a limit on failed sign-ins, sessions that expire and permissions the server enforces. Every statement about the product on this page is checked against the product itself.
Signing in
- Passwords are stored as bcrypt hashes, never in plain text.
- Repeated failed sign-in attempts are slowed down with a rate limit.
- Staff sessions expire after 8 hours.
- Set-password links work once, expire after 72 hours and are stored only as a hash.
- Staff who forget their password can ask for a reset link from the sign-in page; the link works once, for 1 hour.
Access and data
- Fine-tune what each person can do; the server enforces it on every action, not just the screen.
- Four roles (Administrator, Manager, Technician and Sales assistant), each with sensible default permissions.
- Each shop's records belong to that shop; staff can only see their own shop's data.
Where your data is kept
- Fixory runs on Microsoft Azure, and your shop's data is kept in the United Kingdom (UK South, London).
- Ezone Repairs Nuneaton Limited is registered with the Information Commissioner's Office: ZC283072.
- The Data Processing Agreement says how we handle the personal data your shop keeps in Fixory, and the sub-processors page lists the suppliers we use.
Good to know
- There's no two-factor sign-in or single sign-on.