Your company's records, kept to your company.
Every record belongs to one company and the database enforces it on every read and write. Admins sign in with two steps, receipts and documents are private, and each person sees only what their role allows.
7 day free trial, no card$19 per tech per monthAdmins and office staff free
| Pay rates and job money | Admins and the roles they pick |
| Approving time and expenses | Admins and office managers |
| Injury notes and the safety report | Admins and office managers |
| Receipts, photos and documents | Private to your company, as each role allows |
| A customer share link | Only the rooms, reports and photos you pick |
Screens show example data.
The database keeps each company to itself.
Every record belongs to one company, and the database enforces it on every read and write. On top of that, each role sees only what it needs: pay rates for the roles your admins pick, approvals for the office, a technician's own records for the technician.
- One company cannot see another's jobs, people, hours or receipts.
- Turning someone off signs them out of your company at once. Their time and expenses stay on record.
- The company always keeps at least one active admin.
| Pay rates and job money | Admins and the roles they pick |
| Approving time and expenses | Admins and office managers |
| Injury notes and the safety report | Admins and office managers |
| Receipts, photos and documents | Private to your company, as each role allows |
| A customer share link | Only the rooms, reports and photos you pick |
Admins sign in with a code, not just a password.
Two-step sign-in uses an authenticator app such as Google Authenticator or 1Password. Every admin has to turn it on within 7 days of becoming an admin, and anyone else can turn it on from their Profile.
- Add a backup device, and a code from either one works.
- Removing a device asks for a code first. Admins can't turn two-step sign-in off.
- The database checks it too: until the code is entered, the session can't read company data.
- Sign out of other devices on your Profile cuts off a lost phone right away.
Where:ProfileTwo-Factor Authentication
A way back in that still checks who you are.
If someone loses the phone with their authenticator app and has no backup device, any other admin in the company can reset their two-step sign-in. Their codes stop working, they are signed out on every device, and they get an email naming the admin.
- Each reset is recorded with who, whom, when and why.
- Admins can't reset their own. That is why a second admin is worth adding.
- A lone admin emails support@dayreport.app. Support checks who you are and emails the account and the company's other admins, then removes it no sooner than 24 hours later, unless someone objects.
Where:TeamUsersReset two-step sign-in
Receipts and photos stay private.
Receipts, job photos, documents and certifications are kept in private storage. They open through signed links only for people signed in to your company whose role allows it, and a link copied straight from a photo or receipt stops working after 7 days.
- A receipt behind a submitted or approved expense can't be overwritten or deleted.
- Customer share links show only the room progress, reports and photos you pick. Pay, names, notes and prices never show.
- Webhooks never carry contract values, change order amounts, billing rates, material costs or injury notes.
The details buyers ask about.
Sign-in protection
Sign-in, sign-up and password resets pass a bot check. Passwords need at least 8 characters, and ones found in known leaks are refused.
Sessions that really end
Signing out of other devices, or a two-step reset, ends the old sessions on the server too, not only on the phone.
Location at clock in and out
The GPS clock records the location when a tech clocks in and out. It does not follow the phone during the shift.
Hours with a record
GPS hours come from the server clock. An admin who corrects a clocked entry must give a reason, and the timecard shows it.
API keys you control
Admins give each key only the permissions it needs. Only a fingerprint of the key is stored, and a key stops when the person who made it is turned off.
Pay stays private
Pay rates and job money show only to admins and the roles your admins pick.
Hosted in the United States.
DayReport's data is stored with Supabase in the United States and served through Cloudflare. We do not sell personal information and do not use it for advertising. The AI daily summary is written from what your own people logged and the job's documents.
Export for 90 days, then deleted.
While you subscribe, your records stay for as long as you keep them. When a subscription or trial ends, admins can still sign in and download their records for 90 days, or ask support for a full copy. After that we delete the company's data, photos and files for good. The details are in the privacy policy.
Questions worth asking first.
Can another company see our data?
No. Every job, entry, expense, photo and person carries your company's id, and the database checks it on every read and write, not just the screen. One company cannot see another's jobs, people, hours or receipts.
Does everyone need two-step sign-in?
Admins do, within 7 days of becoming an admin. After that date, an admin without it can't open anything until it is set up. Everyone else can turn it on from their Profile and doesn't have to.
What if someone loses the phone with their authenticator app?
If they added a backup device, a code from it works. If not, another admin in your company can reset their two-step sign-in. If you are the only admin, email support@dayreport.app: support checks who you are and emails your account and your company's other admins, then removes it no sooner than 24 hours later, unless someone objects.
Does DayReport track where my techs are?
No. With the GPS time clock, the location is recorded at clock in and clock out only. DayReport does not follow the phone during the shift or in the background.
What happens to our data if we cancel?
When a subscription or trial ends, new entries stop, but admins can still sign in and download their timecards, reports and payroll files for 90 days, and support@dayreport.app can send a full copy. After those 90 days we delete the company's data, photos and files for good, and backup copies expire within 30 days after that. You can ask support@dayreport.app to delete it sooner.
Who can see wages?
Admins, plus the roles your admins pick on the Wages page. Job money follows the same rule. Other people work with jobs and timecards without seeing pay rates.
How much does DayReport cost?
$19 per technician or foreman per month. Admins, office managers, project managers and accountants are free unless you give one a field seat to log their own time. 7 day free trial, no card to start.
Keep exploring
Stop chasing the week down on Friday.
Set up your company, invite a tech and log a real day. It takes about ten minutes and costs nothing for a week.
No card to startAbout ten minutes to set upCancel any time