Security & data isolation
We treat separating and protecting each business's data as a first-class part of the product. Below is what we actually do — no unsupported certifications or claims.
Tenant data isolation
Every business is a separate tenant; your data is scoped to your company server-side, resolved from your session — never a value the browser can change.
Secure authentication
Password hashing (bcrypt), optional two-factor, session integrity and role-based access on every protected route.
Payment security
Payments run through Razorpay; amounts are computed on the server and confirmed by signature-verified, idempotent webhooks — access is granted only after a verified payment.
Auditability
Sensitive actions are recorded in an audit trail, and platform/commercial changes in an append-only platform log.
Controlled access
Module- and role-level permissions decide who can see and do what inside your workspace.
Note: we describe safeguards that are implemented in the product. We do not claim security certifications or compliance we do not hold.