PlowzBox · Security & privacy

Your business stays in your building.

PlowzBox holds your customer list, your schedule, and your money conversations, so you deserve straight answers about how it protects them. Here they are, in plain English, with no scare tactics and no overclaiming.

The short version: encrypted disk, AI that runs locally, no open doors to the internet, and a PIN only you know. The rest of this page explains each one.

A dark workshop bench lit by one warm lamp over a wooden shelf
Your customer data sleeps here, on a shelf you own, not in someone's cloud.

Where your data lives

On your box. Encrypted. Not in a cloud.

Your customers, jobs, quotes, invoices, and message history are stored on the box's own drive, at your shop. There is no PlowzBox cloud holding a copy of your book of business.

Encrypted disk

The whole drive is encrypted

The box uses full-disk encryption (LUKS2, the standard built into Linux and used on servers everywhere). Data on the drive is unreadable without the encryption key.

No cloud copy

One copy, and it's yours

Your records live on hardware you own. They are not synced to a vendor's servers, so there is no cloud database of your customers to breach, mine, or quietly repurpose.

Yours to take

Export anytime

Customers, jobs, and invoices export to plain CSV files whenever you want. Owning your data has to include the right to walk away with it.

Honest scope note: when the box texts or emails a customer, that message travels to them over the phone and email networks, the same way it would from your own phone. “Your data stays on the box” means your stored records, your customer list, your history, your books. It is not a claim that messages teleport.

The AI

The AI reads your data where it lives. It never ships it out.

Most “AI for business” tools forward your customer conversations to a cloud AI provider to get answers back. PlowzBox doesn't. The models run on the box itself.

  • No customer names, numbers, or messages sent to any AI provider.
  • No AI vendor account, no API keys, no per-token meter.
  • No cloud fallback that quietly sends data out when the box is busy.
  • The assistant keeps working during an internet outage, because nothing it thinks with lives anywhere else.
When a customer texts you their address, that address is processed on a computer you own, and nowhere else.
The full picture of the on-box models is on the local AI page.

The front door

There is no front door.

The box accepts no inbound connections from the internet. No public login page, no open ports, nothing for the world to knock on. So how does a customer's text reach it? The box goes and gets it.

  1. Hop 1

    Customer texts your number

    Texts and calls run through your own Twilio-compatible business number, the same way business texting normally works.

  2. Hop 2

    Your messaging provider takes it

    The carrier and your messaging provider handle the message in transit, exactly as they would for a text to your phone.

  3. Hop 3

    The box dials out to collect it

    The connection that delivers messages is opened by the box, from inside your network, outward. Nothing on the internet can open a connection into the box.

  4. Hop 4

    Signature checked, then accepted

    Every incoming webhook is checked against a cryptographic signature. A message that isn't provably from your messaging provider gets dropped, so nobody can forge “customer texts” at your box.

The rule of thumb: the box always dials out, nothing dials in. That single design choice removes the most common way small-business gear gets broken into, an exposed login sitting on the open internet.

Keys & worst cases

One owner, one PIN. And if the box walks off, a paperweight.

Owner PIN

The dashboard answers to you

The owner dashboard sits behind a PIN that only you set. Approvals, money conversations, pricing, and settings are owner-only. Crew phones see their day sheets, not your books. And the dashboard isn't reachable from the public internet in the first place, see above.

If it's stolen

Encryption is for exactly this

If someone walks off with the box, they have the hardware, not the data. With LUKS2 full-disk encryption, the drive's contents are unreadable without the key. Your customer list does not ride along with the metal. Losing the box is a bad day and a replacement, not a data breach.

Plain-language spec sheet: Ubuntu Linux · LUKS2 full-disk encryption · no inbound connections from the internet · cryptographic signature validation on incoming webhooks · owner PIN on the dashboard · AI models local via Ollama, no external AI endpoints. If you have an IT-minded friend, send them this paragraph, then bring their hardest questions to the demo.

Honesty by design

What we deliberately do not do.

A trust page should also list the things a product doesn't touch. Here are ours.

Not us · 01

We are not a payment processor

PlowzBox drafts quotes, invoices, and payment reminders. It does not hold, move, or store card numbers or bank credentials. Money moves through whatever payment method you already use with your customers.

Not us · 02

We don't sell or share your data

There is no analytics side-business and no data brokering. This website doesn't even run trackers. Your customer list has one commercial purpose: running your company.

Not us · 03

We can't see your customers' data

Your records sit on your box, not on our servers. We don't hold a copy, so we can't browse it, mine it, or lose it in a breach of ours. That is a structural fact of where the data lives, not a policy promise.

Not us · 04

We won't call anything “unhackable”

Nobody can honestly promise that, so we don't. What we give you is a small attack surface: no open doors, signed messages, an encrypted disk, and a PIN. Simple defenses, honestly described.

And the AI side of trust lives here too. It never invents a price, never fakes a booking, and never handles a dispute without you. Those hard rules are covered on the how it works page.

Early access

Bring us the hard questions.

At the demo you'll see the box, the dashboard behind the PIN, and the answers coming off local hardware. Bring your most skeptical friend.

You own the box. Your data stays on it. Pricing announced at demo.