Platform
Service recordsThe permanent, photo-documented logbookScheduling & bookingLive availability, contactless bookingEstimates & billingOne-tap approvals, honest invoicesCustomers & vehiclesEvery car's story, shareableReportsMoney in, money owed, at a glanceShopbook Intelligence
AI in the fabric of the platform — drafting estimates, answering questions, watching the money. Included in every plan.
Learn more ›
Trust & security
Guarantees, enforced by architecture.
Most software promises good behavior in a policy document. Shopbook enforces it in the database, where a promise can't drift. This page lists the guarantees and where each one lives.
The record can't be rewritten.
Service record entries are append-only. Every entry carries who wrote it and when. Editing or deleting a past entry is structurally impossible, which is exactly the property that makes a logbook worth trusting.
Issued invoices don't change.
Invoices are numbered sequentially per shop, snapshot their line items forever, and accept zero edits after issue. Corrections are new documents that reference the old one. Money is computed in integer cents.
Your data leaves with you.
Full export of customers, vehicles, records, and financial history, any time, at no charge. The export button works the day you sign up and it still works after you cancel. No hostages.
Your shop's data stays your shop's.
Every row in Shopbook is scoped to your shop, and every query passes through a tenancy seam that enforces it. There is no code path that reads across shops.
Card numbers never touch our servers.
Payments run on Stripe. Your customer's card details go directly to Stripe's PCI-certified infrastructure; Shopbook stores outcomes, not card numbers. Payouts land in your own bank account, not ours.
Rails, enforced.
Routine work — reminders, follow-ups, review asks — runs inside windows and caps you set, and every run is logged. Anything that puts a price or a promise in front of a customer, or touches money, is a draft until a person approves it. Usage is metered and hard-capped.
Who gets in, and to what.
Passkeys and a second factor
Sign-in supports hardware-backed passkeys and SMS verification as a second factor, with trusted devices so the friction lands on attackers, not your staff.
Roles you define
Five built-in roles to start — owner, advisor, tech, salesperson, front desk — and your own, made of the privileges a job needs. Every page and every action checks the privilege, never a hidden link.
Invites are links, never passwords
New team members get a single-use setup link that expires in seven days and set their own password. Shopbook never sends a password over email.
The infrastructure underneath.
TLS everywhere
Data encrypted in transit, always
Encrypted at rest
Database and file storage both
Continuous backups
With point-in-time recovery
Serverless scale
Capacity follows your load
Shopbook runs on serverless infrastructure with a managed Postgres database. No servers in a closet, no maintenance windows on your busiest Saturday.
0
edits possible to an issued invoice. Corrections are new documents
0
card numbers stored on Shopbook servers. Stripe holds them
100%
of your data exportable, any time, at no charge
1 tap
sends what the intelligence already drafted and priced
Questions about security, data handling, or compliance for your shop? Ask the team directly. You'll get an engineer, not a form letter.