Security Overview

Last updated: 3 July 2026 · Version 1.0

Encryption in transit (TLS 1.2+) and at rest. Role-based access, tenant isolation, audit logging, and least-privilege service accounts. Regular dependency scanning and penetration testing scheduled with security partners.

Session control

You can revoke every active session on every device from Settings → Security → Sign out of all devices if you lose a phone or suspect an account is compromised.

Data isolation

Every table that stores customer data is protected by row-level security policies scoped to the owning business. Cross-tenant access is blocked at the database, not just in the app — verified by an automated test suite that runs against every release.

Current service status is at /status.