Business separation
Core records carry the business they belong to, and every read is checked against the signed-in business. One pet care company cannot read another company’s clients, pets, bookings, sitters or messages.
Home access changes the security standard for pet care software.
Sitterly holds access instructions, contact details, pet medical context, team identities, messages, location data and payment records. Security is part of how we run the product every day, not a badge on a website.
Ask a security questionControls follow the sensitivity of the work.
We describe each control specifically, so you can judge it for yourself rather than take a badge on trust.
Role-aware access
Owners, office staff, sitters, clients and platform administrators have different responsibilities. Sensitive actions are checked against the person’s role and their relationship to the record.
Stricter handling for home access
Entry instructions and codes are shown to a sitter only for a client the owner has confirmed. A booking sent through the public form with a client’s phone number never releases that client’s codes on its own.
Protected sessions and identity checks
Sessions are checked on the server and stop working when a person’s access is removed. A second sign-in step is available for protected accounts.
Traceability and automated checks
Selected sensitive actions emit audit events. The engineering workflow includes dependency checks, secret scanning, protected build gates, and authorization and tenant-boundary tests on every change.
Where we are today, honestly.
We would rather tell you where the program stands than describe it in words we cannot back.
- We are a small company and do not hold a SOC 2 report.
- We have not published an independent penetration test report.
- The controls and tests above are real and in place today. Hardening is ongoing work, so we describe the program in specifics rather than absolutes.
Each pet care business remains responsible for its own staff, devices, permissions and handling of client information.
Found something? Tell us.
Send security questions or suspected vulnerabilities to support@sitterlysoftware.com. Please leave client secrets, passwords, full payment data and other personal details out of that first message. We will ask for what we need.