Our approach
Shiftzilla is operated by 2842192 Alberta Ltd. and handles private restaurant and workforce information. Its current application uses Clerk for identity and Cloudflare Workers and D1 for application processing and workspace data. Protected file features use Cloudflare R2, and enabled video features use Cloudflare Stream.
Access and protection
Sign-in establishes identity. Server-side checks separately verify current organization membership, store access, permission level, and the requested record. A display title, URL, or client-side setting does not grant access. Private file access also requires authorization.
Application and sign-in traffic use HTTPS. Requests are validated and bounded, and the application applies rate limits and security monitoring. These protections do not make a service immune to every incident. Protect your credentials and devices, keep workplace access current, and report unexpected access promptly.
Responsible reporting
Email security@shiftzilla.ca with the affected feature, a description, and safe reproduction steps. Do not send passwords, access tokens, or other people's private records. We can arrange an appropriate way to receive sensitive evidence.
This page does not authorize testing another organization's workspace, collecting private data, disrupting service, or bypassing access controls. Security testing requires written authorization and an agreed scope.
Privacy and service information
The privacy notice identifies service providers, data use, retention, and account choices. The account-deletion page explains how to request deletion. Contact support@shiftzilla.ca for an access problem without sending credentials.
We do not claim SOC 2 or CyberSecure Canada certification, guaranteed Canadian-only processing, a contractual availability level, or a tested recovery time through this page. Any separately agreed service commitments must be stated in your organization's agreement.
Back to top