Security and data
Last updated October 5, 2026
Shift Ready holds vehicle records for public safety agencies. This page explains, in plain language, how access to that information is controlled today. We are glad to walk through it with your IT staff.
What Shift Ready stores
- Vehicle details such as unit number, VIN, plate, and mileage.
- Inspection results, reported issues, notes, and maintenance history.
- The names, work email addresses, and role assignments of department users.
Shift Ready is a vehicle inspection and maintenance tool. It is not designed to hold criminal justice information, and departments should not enter it.
Who can see a department’s records
- Each department’s records are kept separate. The database itself enforces this, not just the screens.
- A signed-in user sees only the records of the department they belong to, and only what their assigned permissions allow.
- There is no public sign-up. People are added by their department through an invitation.
- Department administrators can lock and unlock user accounts.
Signing in
Passwords must be at least 12 characters, and Shift Ready checks them against lists of passwords known to have leaked.
Protecting information
Connections to Shift Ready use HTTPS, and browsers are instructed to require it. The application runs on Cloudflare and the database runs on Supabase, both established platforms that encrypt data in transit and at rest. Production database backups are enabled.
How changes are made
Changes are tested in a separate staging environment before they reach production. The application has had an internal security review, with the findings corrected and retested.
What we do not claim
We do not currently hold a formal security certification such as SOC 2, and we do not claim CJIS compliance. If your agency has specific requirements, tell us and we will answer plainly.
Questions or concerns
Use the request form on our home page. If you are reporting a security concern, say so in your message and we will respond as quickly as we can.