CarSignalYour login
Every user can enable two-factor authentication in Settings, Security, with any authenticator app. Password resets use a 6-digit emailed code with a confirm-password step.
Customer links
Customers never have accounts. Every customer surface, approvals, invoices, inspections, status pages, is a tokenized private link, and links expire: approval links after 30 days, invoice links after 60. An expired link shows a polite screen telling the customer to ask the shop for a fresh one; re-sending takes one tap.
Signatures and compliance
Approvals and invoice signatures capture the typed name (and drawn signature on invoices), timestamp, device, and the consent text shown, the record California BAR-style authorization rules expect. Invoices refuse to send if state-required fields are missing from your Settings.
Who sees what
Money and configuration are admin-only: Financials, billing, and settings never appear for technicians or service writers. See Team and roles.
Texting compliance
Messaging runs on your shop's registered carrier number, honors opt-outs everywhere, and never sends between 9pm and 8am. See Texting setup.