Who we are
FieldworkABA is run by FieldworkABA.com LLC, a United States company.
We make money one way: subscriptions from trainees, and plans for organizations. There is no advertising in FieldworkABA, and we do not sell your data. Supervisors use FieldworkABA free.
We are independent. We are not affiliated with, endorsed by, or acting on behalf of the BACB, and we never submit anything to the BACB for you.
How your data is protected
- Encrypted in transit. Everything runs over HTTPS, with HSTS enforced for a year across all subdomains.
- Encrypted at rest. Your records are stored in a managed database that encrypts stored data.
- Hosted in the United States. Our servers and your records stay in the United States.
- Passwords are hashed, never stored in readable form. Sign-in with Google is available if you prefer not to keep another password.
- Two-factor authentication is available on administrator accounts, with recovery codes, and the two-factor secret is itself encrypted.
- Session cookies are restricted to HTTPS, are not readable by scripts, and are limited to our site.
- Uploaded files are virus-scanned before they are stored, including the files you send when moving hours from another tracker.
- Every change to an hour entry is logged: what changed, when, and by whom. Added, edited, and deleted entries all leave a trail.
- Daily backups, kept separately from the live system.
- Server access is key-only. Password logins to our servers are disabled.
- Card details never reach us. Checkout runs on Stripe, so we never see or store card numbers.
Who can see your records
- You. Your records are yours.
- Supervisors you connect. A supervisor sees the months they are responsible for, not your whole history. If you end that connection, they keep read-only access to the months they already oversaw, because they signed off on those months and have to retain that documentation themselves.
- Your organization’s admin, if an organization pays for your seat.
- Our team, only to provide support or fix a problem.
What we never do
- We do not sell your fieldwork records, supervisor records, or exam preparation activity.
- We do not show ads.
- We do not send your records to the BACB. Your monthly forms are yours to keep and to produce yourself if you are audited.
What you control
- Export whenever you like. Monthly verification forms, reports, and a full records archive you can download and keep elsewhere.
- Storage for 7 years, the retention period the BACB expects for fieldwork documentation.
- Supervisor access, which you grant and can revoke.
- Deletion. Ask us and we will delete your account. Export anything you want to keep first, because deletion removes access to records, forms, and supervisor connections.
Please do not store client records here
FieldworkABA is a fieldwork tracking system, not a clinical record system. It is not built for patient records or Protected Health Information, and it is not provided as a HIPAA-covered system.
Write your activity notes the way the BACB expects, describing what you did, and leave out client names, dates of birth, addresses, insurance details, and anything else that identifies a person.
Who we work with
| What they do | Provider |
|---|
| Servers and database | Managed hosting in the United States |
|---|
| Payments | Stripe hosted checkout |
|---|
| Optional sign-in | Google |
|---|
Reporting a problem
If you think you have found a security problem, tell us through the contact form and describe what you found. We read every report and will tell you what we do about it.
Keep your fieldwork record where you can get it back
Log your hours, sign each month, and keep everything exportable for the full seven years.
Start Free
See how storage works
