Security & your data
You are handing over the record of what you are owed.
So here is how it is kept, who can reach it, and what happens to the personal information your customers gave you.
Separation
One workshop cannot see another's
This is the part that matters most and the part most systems handle with a filter in the application code, which works right up until somebody forgets to write one.
Enforced in the database
Every record — every customer, vehicle, invoice, quote and payment — carries the workshop it belongs to, and the database itself refuses to return rows from any other workshop.
It is a rule in the data layer, not a WHERE clause in a screen. A missed filter in the app cannot leak anything, because the database would not serve it.
Your team, and only your team
Access comes from being a member of your workshop. Someone with an Upshift account for a different workshop is, to your data, simply another member of the public.
Nothing shared between tenants
Customers, vehicles, part numbers, prices — none of it is pooled, compared or used across workshops. Your pricing is nobody else's benchmark.
Documents you send
The link your customer opens
An invoice link has to work for someone with no account and no password. That is a deliberate design, and it has limits worth understanding.
Unguessable, not public
Each document link carries a long random identifier. There is no list to browse, no sequence to walk, and no way to find one by trying.
Kept out of search engines
Every shared document is marked no-index and the site's robots file excludes the whole area, so a forwarded link cannot end up in Google.
It is a link, so treat it like one
Anyone your customer forwards it to can open it. It is the same risk as a PDF attached to an email — worth knowing rather than worth hiding.
Payment details
We never see your card
Your subscription is billed through a registered South African payment gateway.
Held by the gateway, not by us
Card details are entered on the gateway's own secure page and stored as a token. Upshift keeps the card brand and the last four digits so you can recognise it, and nothing else.
Your own banking details
The account number that prints on your invoices is reference information you type in, exactly as it appears on your letterhead today. It is not connected to any payment rail.
Billing state is server-side
Subscription status, price and card token can only be changed by the billing system, never from a browser — a tenant cannot mark its own account paid.
POPIA
The personal information in your system
Your customers' names, numbers, email addresses and vehicles are personal information under the Protection of Personal Information Act. You are the responsible party for it; we process it on your behalf.
It stays yours. We do not sell it, rent it, mine it for marketing, or use it to train anything. It exists so that you can invoice people and keep a service history.
Only what the job needs. Upshift asks for the details an invoice and a service record actually require. There is no reason for a workshop system to hold identity numbers, so it does not.
You can get it out. Export your data whenever you want, and cancelling does not hold it hostage. If a customer asks you to delete their information, you can.
Encrypted in transit and at rest. The site is served over HTTPS end to end, and the database is encrypted where it is stored.
Ask us anything. Where the data is hosted, who has access, what our sub-processors are — write to rassie@monoform.co.za and you will get a straight answer from a person, not a form.
Being straight with you
What we are not claiming
Monoform (Pty) Ltd is a small South African company. We are not going to print a wall of certification badges, because we do not hold them, and on a page about trust that would be the worst possible thing to do.
What we can tell you is how the thing is actually built: separation enforced in the database rather than in application code, no card data on our side, no use of your records for anything except running your workshop, and a person on the other end of rassie@monoform.co.za when something looks wrong.
If your business needs something more formal than that before you can sign, tell us what and we will tell you honestly whether we can meet it.
Still want to kick the tyres?
Start the 14-day trial with a handful of real jobs and see how it holds up before you move everything.