Trust
Who can see your data
This page sets out who can see your records, how technicians sign in, and what happens to money figures once they are locked. It describes Chance OS as it is today.
Inside your company
Who sees what
Roles and squad scopes are set per company. A squad leader sees their squad. "All" means all of yours.
The Accountant role is read-only, everywhere.
Between companies
Your company and other companies
Each company's data is separated in the database, not in the interface. Row-level rules decide what every query can see. Files are stored under a per-company path.
We walk the fence before every company joins: every rule, every function that can bypass a rule, checked from a new company's account, not ours.
Who runs it
You're a contractor. So are we.
That's the conflict, and we'd rather name it than wait for you to.
What's enforced today. No company can see another company's data. The rules in the section above apply to CASS, our own aircond company, exactly as they apply to you — same fence, checked the same way.
Where this is going. Chance OS runs today as its own unit inside CASS, with its own P&L. The plan is its own company, with CASS as a customer like any other.
Technician sign-in
How technicians get in
Technicians sign in with a PIN, enrolled during a window the office opens. No email, no app store, no password to forget on a roof.
Technician PINs are issued and reset by the office, never from the phone alone.
Technician PINs are stored hashed, hidden from every query, and rotated.
Money records
What happens to the figures
See which squad made money last month — and the number each must bill to break even this month. Your office types in the revenue and the costs.
Saves on the job, visit, revenue, cost and attendance paths are verified — a failed write tells you.
Every list reads in a fixed order, and the system checks its own row counts nightly.
The finalised figure is locked. If later entries move that month, the system shows you by how much.
When you share the pool, each squad's pool and each person's share are computed and locked at finalise. Nothing provisional circulates.
Money lives on claims, never on a parent record. A period can't finalise until every pooled squad has a 100% split. Visits with sessions and jobs with visits can't be deleted.
Onboarding
Before you rely on it
We onboard you personally — including importing your current-year P&L so your accountant can verify our numbers against hers before you trust a single screen.
Questions
Ask us directly
If this page does not answer your question, WhatsApp us. We would rather answer it than have you guess.