Security and data

Built so one business never sees another's data: every database query is scoped to the business, and an automated check on every build enforces it.

Card details are typed into Stripe's own secure card field and go straight to Stripe; our servers never see the card number.

Every team member has a role, and the role decides which parts of the business they can open and change.

Changes to the product are reviewed and run through automated tests before they join it, and are tried on a test system first.

There is no production system yet, so we make no claim about uptime, backups, failover or PCI level. We will add a line here only when it is true.