Security & data
Your company's data is walled off from every other company's.
Every query is scoped to your company by a fail-closed database extension, and the database itself refuses rows without an owner. Provider secrets are encrypted at rest, sessions are revocable, webhooks are signature-checked and platform staff can only act in your account with a recorded reason.
Applies to every plan.
What it does
- Tenant isolation
- Prisma extension that fails closed plus CHECK constraints on every business table; per-company unique numbering.
- Encrypted secrets
- Twilio tokens, SMTP passwords and webhook URLs are AES-256-GCM encrypted under a server key.
- Sessions and passwords
- argon2id hashing, 12-character minimum, lockout after repeated failures, database-backed revocable sessions.
- Audit and impersonation
- Support access to your account requires a reason, expires after 30 minutes, shows a banner and is written to the audit log.
- Your data, exportable
- CSV per table any time, or a full ZIP export; a 30-day retention window after cancellation, then scheduled purge.
See it with your own company name on it.
Create your company, pick a layout, and book your first job — the trial is free and needs no card. 14-day free trial.