Home / Security
Security
How your data is kept apart
One business can never read another's rows. That is enforced in the database rather than in application code that has to remember.
Isolation at the database
Row-level security is forced on every table carrying a business id, and the application connects as a role that cannot bypass it. A missing filter in a query fails closed.
Least privilege
The application role owns nothing and cannot alter the schema. Migrations are applied separately and deliberately.
Attributed history
Timesheet edits, approvals and flags all record who and when. Proof photos are tied to a person, a shift and a timestamp.
Your data leaves with you
Export shifts, punches, checklist runs and photos at any time. Cancelling does not start a retention clock designed to keep you.
Start with one shift this week
Put one opening checklist on one location and see what comes back. Free for 14 days, no card, and your data leaves with you if it is not for you.