Your numbers are the business. We treat them that way.
Role isolationCost and margin data is filtered server-side by role. A sub's or client's session never receives your cost figures — the fields are never fetched into their views, not merely hidden in the UI. It's the invariant the whole product is built around.
EncryptionServed over TLS. Data and uploads sit in managed Postgres and storage on Vercel, encrypted at rest by the platform.
Access linksSub and client access is scoped to exactly the pages you granted, changeable from the team screen, and gone when you remove the membership.
SessionsSigned, httpOnly session cookies. Changing your password immediately invalidates every other session — a stolen login cannot outlive the fix.
Your dataYours, full stop. We don't sell it or mine it, and a full export path is on the roadmap.
HostingRuns on Vercel. Live platform status is on their status page, linked from ours — we won’t post uptime numbers we don’t yet measure ourselves.