Trust center
How Friday Falcon protects your work.
Friday Falcon handles contractor, agreement and financial records. The service uses server-side access checks, private file access and traceable records to help keep that work within the right company and role.
Access and authorization
- Authenticated sessions and server-enforced Access roles and Permissions protect Company and My business records.
- Access is enforced server-side, not inferred from navigation or hidden controls.
- High-impact actions require explicit confirmation, prevent accidental duplicate results, and record who acted and when.
Private files and sensitive data
- Operational documents are kept in private storage and are not exposed through public object listings.
- Friday Falcon checks access before an upload begins and again before a download. Downloads use short-lived access.
- Friday Falcon avoids collecting raw bank credentials and other restricted information unless an enabled workflow specifically requires it.
Evidence, engineering and operations
- Important agreement, review, invoice and payment evidence is versioned or append-only instead of silently rewritten.
- Production secrets stay in server environments; privileged database credentials are not shipped to the browser.
- Release checks cover attempts to cross Company boundaries, accessibility, browser behavior and failure states in proportion to the feature risk.
Report a security concern
Email hello@fridayfalcon.com with a concise description and a safe way to contact you. Do not include passwords, private keys, government identification, bank credentials or unnecessary customer data. For an active account compromise, put Urgent security concern in the subject line.