SECURITY & COMPLIANCE
Protect the Operations Your Business Depends On
Fieldpoint helps commercial and industrial service organizations protect critical business and customer data through layered security controls across infrastructure, applications, access, and operational processes.
Hosted on Amazon Web Services (AWS), Fieldpoint combines secure access, encryption, monitoring, risk management, and established incident response practices.
Security Built for Complex Service Operations
Fieldpoint connects service, project, customer, and financial workflows. Layered security controls help protect that information wherever work happens.
Protect Data
Encryption and secure transmission methods help protect data at rest and in transit.
Control Access
Unique credentials, multi-factor authentication, and role-based controls help limit access to authorized users.
Monitor Threats
Firewalls, endpoint protection, logging, event monitoring, and vulnerability management provide layered protection.
Manage Risk
Patch management, penetration testing, vendor risk management, security training, and ongoing monitoring support continuous risk reduction.
Secure From Infrastructure to Application
AWS-Hosted Infrastructure
Fieldpoint is hosted on Amazon Web Services (AWS). AWS annually certifies compliance with PCI DSS and undergoes an annual AICPA SOC 2 Type 2 audit.
Fieldpoint maintains separate production and test environments with network segmentation designed to prevent access in one environment from being used to access another.
Protect Data Wherever It Moves
- Encryption in transit: Secure VPN, SFTP, or HTTPS with TLS 1.2 or later.
- Encryption at rest: Cryptographic controls protect inactive digital data where feasible, with mitigating controls where encryption is not feasible.
- Data loss prevention: EverCommerce uses controls designed to help prevent sensitive information from being sent through unencrypted company email.
- Data privacy: Customer data is used to provide contracted services, with defined retention and purge processes.
Put Access Control in Your Hands
Fieldpoint supports configurable access controls for complex organizations, helping teams give users the access they need while limiting unnecessary exposure.
- Role-Based Access – Configure access to system functions by user role.
- Multi-Factor Authentication – MFA is supported for application users and required for access to Fieldpoint production environments.
- Secure Authentication – Unique user credentials and customer-configured password complexity requirements help protect access.
- Access Lifecycle Management – Policies govern provisioning, periodic reviews, and prompt deactivation when access is no longer required.
Detect, Test and Respond
- Continuous Monitoring – Automated tools analyze system and network events and generate alerts for suspicious activity.
- Vulnerability Management – Automated vulnerability scanning and defined patch-management requirements help identify and address security vulnerabilities.
- Independent Penetration Testing – Independent testing is performed at least annually or following significant environmental changes.
- Audit Logging – Access, administrative, and system activities are logged, with logs retained for at least 18 months.
- Incident Response – EverCommerce maintains a formal incident response program with documented procedures, escalation processes, and annual testing.
Support Business Continuity
Fieldpoint maintains weekly full backups, nightly differential backups, and 15-minute log backups to help support continuity for critical service operations.
Security That Fits Your Technology Environment
Fieldpoint is built for complex commercial and industrial service operations, connecting field activity to the financial systems your business depends on while supporting specialized workflows and access requirements.
That means security and control are part of an architecture designed to fit your broader technology environment, not another disconnected system to manage.
Protect Your Service Operations With Confidence
See how Fieldpoint combines operational depth, field-to-finance connectivity, configurability, and security controls for complex commercial service organizations.