Trust & Security
How we protect your data.
Data encryption
All data is encrypted at rest using AES-256 and in transit using TLS 1.2+. API keys are hashed. Passwords use bcrypt with per-tenant salts.
Multi-tenant isolation
Every tenant's data is fully isolated at the database level. No other company can see, access, or query your records. Row-level security enforced on every API call.
Role-based access control
Four built-in roles (Admin, Manager, Rep, Read-Only) with granular permissions. Enterprise plans support custom roles with per-feature permission control.
Audit logging
Every data change is recorded with who, what, when, and from where. Enterprise customers can view the full audit log, filter by user or entity, and export to CSV.
Compliance roadmap
We follow SOC 2 Trust Services Criteria and are working toward formal certification. Security controls are documented and reviewed quarterly.
Infrastructure
Hosted on Azure with automated backups, geo-redundant storage, and 99.9% uptime SLA for Enterprise customers.