Security & compliance
Your jobs, your data — isolated by default.
Security isn’t a tier you upgrade to. Every account gets database-enforced isolation and role-based access from day one.
How your data is protected
Row-level security
Every company’s data is isolated at the database layer with Postgres row-level security — enforced, not just app logic.
Role-based access
People see only what their role allows, with per-user permission overrides on top.
Multi-tenant isolation
Your account’s data never crosses to another company. Isolation is verified by tests.
Encrypted in transit
Everything travels over HTTPS/TLS between your browser, the app, and the API.
Least-privilege by default
The app runs without database bypass rights, so policies are always in force.
Activity trail
Changes to a job — edits, payments, status — are recorded in a per-project activity log.
Straight talk
What we claim — and what we don’t.
True today: database-enforced row-level security, role-based access control, multi-tenant isolation, and TLS in transit. We test that one company cannot read another’s data.
On the roadmap, not yet: SOC 2 is a goal, not a certification we hold today — so we don’t put a badge on it. We’ll say so plainly the day that changes. We also don’t claim application-layer encryption-at-rest we haven’t shipped.
Run your jobs on a foundation you can trust.
Join early access — your data is isolated from day one.