Will we lose our records? No. Here is why.
Your daily reports, time, photos and pay applications are the record you bill from and stand behind. This page says how YakProject keeps them, who can see them and how you get them out.
Export everything, on every plan.
Reports, time, photos and records export as PDF or CSV on every plan, including the free one. Cancelling a paid plan returns you to Solo and keeps your records, and archived jobs stay readable.
Revisions are kept, not overwritten.
A change to a daily report or record creates a new revision; earlier revisions are kept. Photo markup is saved as revisions and the original photo never changes. Changes are written with an audit event in the same transaction, and access to regulated records is logged.
- Concurrent edits are refused rather than silently overwritten.
- Cost lines are voided, never edited.
Hashed credentials and two-step sign-in.
Passwords are stored as bcrypt hashes, never in plain text. Two-step sign-in is supported, and phone app sessions rotate. Card payments are handled by Stripe.
Scoped keys that can never do more than their person.
API keys are stored as SHA-256 hashes and shown once. Each key or OAuth app is limited to the areas and jobs granted, and every call is also checked against the person's current role, so removing someone stops their keys at once.
- Read or write per area, chosen jobs, expiry and an IP allowlist; roll or revoke at any time.
- Signing, certifying and approving money or legal records are never grantable to a credential.
- OAuth 2.1 with PKCE and one-hour access tokens; webhooks signed with HMAC-SHA256.
Permissions by role, on every job.
What a person can see and do comes from their role on the job. The owner's representative sees only what is published to the portal. An invited subcontractor's session is limited to their own assignment, and wages and pay rates never cross between connected companies.
No face recognition. A person decides.
Photo features do not identify people and use no biometrics or face recognition. AI features draft and flag; a person reviews and accepts. Nothing is submitted, approved, signed or paid by AI, and private notes are never sent to it.
Hosting
YakProject runs on servers rented from Hetzner Online GmbH in its Falkenstein data center in Germany (EU), on the OpenBSD operating system, and your records and files are stored there too. Connections are encrypted with HTTPS. For a security questionnaire, email support@yakware.com.
Report a security problem
If you think you have found a vulnerability, email support@yakware.com with the details. Please don't access other customers' data while testing. See also the privacy policy and terms.
Run your next job on it.
One job is free for as long as you like. No card to start, and everything exports.