Tenant isolation at the database
Every table carries row-level security policies. Isolation isn't a filter in application code that someone can forget.
Security
Your books, your data, your business only
Multi-tenant done properly means another business physically cannot read your rows. Here's how that's enforced, without the marketing fog.
- Row-level isolation
- Server-side money logic
- Immutable audit trail
Row-level
Database policies isolate every business's data
Region-pinned
Tenants are pinned to one deployment region
Immutable
Financial records cannot be silently edited
Role-based
Access enforced on the server, not the screen
How it's enforced
Controls, not claims
Nothing trusted from the browser
Prices, discounts, stock deductions, refunds and commissions are all calculated and authorised server-side.
Least-privilege roles
Owner, manager and staff permissions are checked server-side against a dedicated roles table, never a flag on a user record.
Immutable financial records
Tax invoices are sequential and non-editable. Corrections are credit notes, and the stock ledger is append-only.
Data residency
Each business is pinned to a deployment region, and there are no cross-region joins between tenants.
Audit logging
Sensitive reads and administrative actions are logged with the user, the time and the record touched.
Payments
We don't want your customers' card numbers
Card data is handled by the payment provider and the terminal, not stored in your account or on your devices.
- No raw card numbers stored in the platform
- Payment authorisation handled by regulated providers
- Refunds traced to the original transaction
- Surcharge calculations retained as evidence of compliance
Your control
You decide who sees what
Permissions, exports and deletion are yours to run without raising a support ticket.
- Invite, promote, demote and remove team members yourself
- Full CSV export of clients, sales, invoices and stock
- Consent and marketing preferences recorded with timestamps
- Report a security concern and we'll respond, not deflect
Questions
Straight answers
Ask us the hard questions
Book a call and bring your security checklist. We'd rather answer it now than after you've signed.