PlowzBox · Security & privacy
Your business stays in your building.
PlowzBox holds your customer list, your schedule, and your money conversations, so you deserve straight answers about how it protects them. Here they are, in plain English, with no scare tactics and no overclaiming.
The short version: encrypted disk, AI that runs locally, no open doors to the internet, and a PIN only you know. The rest of this page explains each one.
Where your data lives
On your box. Encrypted. Not in a cloud.
Your customers, jobs, quotes, invoices, and message history are stored on the box's own drive, at your shop. There is no PlowzBox cloud holding a copy of your book of business.
The whole drive is encrypted
The box uses full-disk encryption (LUKS2, the standard built into Linux and used on servers everywhere). Data on the drive is unreadable without the encryption key.
One copy, and it's yours
Your records live on hardware you own. They are not synced to a vendor's servers, so there is no cloud database of your customers to breach, mine, or quietly repurpose.
Export anytime
Customers, jobs, and invoices export to plain CSV files whenever you want. Owning your data has to include the right to walk away with it.
Honest scope note: when the box texts or emails a customer, that message travels to them over the phone and email networks, the same way it would from your own phone. “Your data stays on the box” means your stored records, your customer list, your history, your books. It is not a claim that messages teleport.
The AI
The AI reads your data where it lives. It never ships it out.
Most “AI for business” tools forward your customer conversations to a cloud AI provider to get answers back. PlowzBox doesn't. The models run on the box itself.
- No customer names, numbers, or messages sent to any AI provider.
- No AI vendor account, no API keys, no per-token meter.
- No cloud fallback that quietly sends data out when the box is busy.
- The assistant keeps working during an internet outage, because nothing it thinks with lives anywhere else.
When a customer texts you their address, that address is processed on a computer you own, and nowhere else.
The front door
There is no front door.
The box accepts no inbound connections from the internet. No public login page, no open ports, nothing for the world to knock on. So how does a customer's text reach it? The box goes and gets it.
-
Hop 1
Customer texts your number
Texts and calls run through your own Twilio-compatible business number, the same way business texting normally works.
-
Hop 2
Your messaging provider takes it
The carrier and your messaging provider handle the message in transit, exactly as they would for a text to your phone.
-
Hop 3
The box dials out to collect it
The connection that delivers messages is opened by the box, from inside your network, outward. Nothing on the internet can open a connection into the box.
-
Hop 4
Signature checked, then accepted
Every incoming webhook is checked against a cryptographic signature. A message that isn't provably from your messaging provider gets dropped, so nobody can forge “customer texts” at your box.
The rule of thumb: the box always dials out, nothing dials in. That single design choice removes the most common way small-business gear gets broken into, an exposed login sitting on the open internet.
Keys & worst cases
One owner, one PIN. And if the box walks off, a paperweight.
The dashboard answers to you
The owner dashboard sits behind a PIN that only you set. Approvals, money conversations, pricing, and settings are owner-only. Crew phones see their day sheets, not your books. And the dashboard isn't reachable from the public internet in the first place, see above.
Encryption is for exactly this
If someone walks off with the box, they have the hardware, not the data. With LUKS2 full-disk encryption, the drive's contents are unreadable without the key. Your customer list does not ride along with the metal. Losing the box is a bad day and a replacement, not a data breach.
Plain-language spec sheet: Ubuntu Linux · LUKS2 full-disk encryption · no inbound connections from the internet · cryptographic signature validation on incoming webhooks · owner PIN on the dashboard · AI models local via Ollama, no external AI endpoints. If you have an IT-minded friend, send them this paragraph, then bring their hardest questions to the demo.
Honesty by design
What we deliberately do not do.
A trust page should also list the things a product doesn't touch. Here are ours.
We are not a payment processor
PlowzBox drafts quotes, invoices, and payment reminders. It does not hold, move, or store card numbers or bank credentials. Money moves through whatever payment method you already use with your customers.
We don't sell or share your data
There is no analytics side-business and no data brokering. This website doesn't even run trackers. Your customer list has one commercial purpose: running your company.
We can't see your customers' data
Your records sit on your box, not on our servers. We don't hold a copy, so we can't browse it, mine it, or lose it in a breach of ours. That is a structural fact of where the data lives, not a policy promise.
We won't call anything “unhackable”
Nobody can honestly promise that, so we don't. What we give you is a small attack surface: no open doors, signed messages, an encrypted disk, and a PIN. Simple defenses, honestly described.
And the AI side of trust lives here too. It never invents a price, never fakes a booking, and never handles a dispute without you. Those hard rules are covered on the how it works page.
Early access
Bring us the hard questions.
At the demo you'll see the box, the dashboard behind the PIN, and the answers coming off local hardware. Bring your most skeptical friend.
You own the box. Your data stays on it. Pricing announced at demo.
Keep exploring
The rest of the story.
How it works
The whole loop: plug it in, teach it your business, approve from your phone, and let it handle the follow-through.
Read moreThe local AI
Four models on one box, no per-token fees, and an assistant built to say “I don't know.”
Read moreAnswer every text
The AI receptionist for texts and email. Grounded answers, your one-tap approval, English and Spanish.
Read moreGet paid
Quotes that follow up, invoices with AR aging, and payment reminders you approve before they send.
Read more