Back to home
Security
Built for OWASP-aligned web security, tenant isolation, and operational compliance.
Tenant isolation
Every business record is tenant-scoped; cross-tenant access is blocked at middleware and query layers.
Authentication & MFA
Email verification on signup, session timeouts, and MFA for tenant users on the app host.
Audit & governance
Tamper-evident audit chain, data access justification, and SOC 2 technical controls.
Secure headers
CSRF protection, content security policy, and no inline scripts on public pages.