What we do, and what we don't claim
A system holding customer names, addresses, driver's-license data and 4473-adjacent records should be able to say plainly how it is put together. Here is that, including the parts that are not flattering.
How access works.
- Five roles
- Intake staff, technician, accounting, license administrator and system administrator. Authorisation is checked on every operation, not just at the door — a page being reachable is never what decides whether an action is allowed.
- Per-license isolation
- Every operation that acts on a record checks that the record belongs to a license the caller can actually see. Record ids are printed on tags as DataMatrix codes, so knowing an id is completely normal — and is never treated as permission.
- Two-factor authentication
- Available on user accounts, and worth turning on for anyone with administrator rights.
- Encrypted integration credentials
- FastBound API credentials are encrypted and stored against the license they belong to, rather than sitting in a shared configuration file.
- Card data never reaches us
- The countertop terminal and the payment processor handle the card. BenchMaster keeps the transaction reference, the card brand and the last four digits — enough to reconcile a payment, and nothing that could be used to make one.
- Attribution, not just authentication
- The counter machine is shared, so the person who authenticated in the morning is often not the person doing the thing. Records carry who was actually standing there, which is what makes the audit trail worth reading.
- Audit trail
- Who did what, on which license, when — across every location rather than one trail per site.
- Scoped customer links
- A portal link authenticates on a token bound to one work order. It shows that job and nothing else.
BenchMaster holds no certifications.
Not SOC 2. Not a PCI attestation. Not a Zebra partner badge. An earlier version of this site carried all three in a row under the headline, and none of them was true — so they are gone, and there is no compliance badge anywhere on this site.
What we can do instead is show you exactly how it works. On a call we will walk through where your data sits, what the card terminal does and does not send us, how one license is kept away from another, and what the audit trail records. If your insurer or your own compliance process needs something specific in writing, ask and we will tell you honestly whether we can provide it.
Come and see it
on a real counter.
Thirty minutes, screen shared, your questions. If BenchMaster is wrong for your shop you will know inside the first ten minutes, and we will both have saved a week.
Talk to the people who use it every day