Everything on this page describes how CustoDesk works right now — not a roadmap. Where we haven't done something yet, we say so.
Add your whole team — office staff, crew, seasonal help. There is no seat count anywhere in CustoDesk, and no plan where adding a person costs money.
No contract, no minimum term, no cancellation call. Switch an app off and you keep it until the end of the period you already paid for.
Your invoices, timesheets and job history stay exactly where they are. Turn the app back on later and everything is still there, untouched.
One button exports your whole workspace as spreadsheet files — including on a free trial, before you've paid us anything. No request, no waiting, no support ticket.
Settings → Data & privacy → Export everything builds a ZIP of your entire workspace as CSV files: support tickets and their full message history, contacts, invoices, estimates, line items, payments, jobs, timesheets, expenses, reviews, help-center articles, an index of your media library, and your team roster.
The archive includes a README explaining every file. If any part of it couldn't be included, that is stated at the top in plain language rather than left for you to notice — an export that looks complete but isn't would be worse than no export.
Nothing in it is encrypted or locked to us. It opens in Excel, Numbers or Google Sheets and can be imported anywhere.
Some things are stored so that nobody can read them back out — not you, not our support team, not an attacker who reached the database:
None of these are ever included in a data export, for the same reason.
Every query in CustoDesk is scoped to your workspace. Asking for a record that belongs to someone else doesn't return "access denied" — it returns "not found", so nobody can even learn whether a given record exists.
Inside your workspace, access is per-area: you decide who can see support, money, jobs, contacts or marketing, at none / view / manage. Those checks run on the server, not by hiding buttons in the browser.
Standards-based authenticator-app 2FA with ten single-use recovery codes. Admins can require it for everyone in the workspace.
Repeated wrong passwords lock the account temporarily, and a separate limit blunts attacks spread across many accounts. Wrong 2FA codes lock out too.
Resetting a password or suspending a member kills every one of their live sessions immediately, on every device — not at the next sign-in.
Security-relevant changes — 2FA on or off, recovery codes regenerated, member access changed, a full data export taken — are written to your workspace activity log.
CustoDesk uses Claude (Anthropic) for reply drafts, summaries, triage, help-center answers, receipt scanning and a few other features. Two things are worth knowing.
You can turn it off completely. Settings → AI Copilot has a master switch, a toggle for every individual AI feature, and a monthly cap you set yourself. With AI off, those features fall back to non-AI behaviour — nothing breaks and nothing errors.
You cannot be surprised by an AI bill. Set your cap to "stop at the limit" and AI switches itself off for the rest of the month rather than running up an overage. We email you before you get there, either way.
CustoDesk is a young product, and the honest version of this page includes the gaps.
If any of these change, this page changes with them — and not before.
If you believe you've found a security issue, email [email protected] with enough detail to reproduce it. We'll confirm we received it, keep you updated while we fix it, and we won't pursue anyone who reports in good faith and gives us reasonable time before going public.
Create a workspace, put real data in, and click Export everything on day one. That's a better test of any of this than a page can be.