Trust that holds up
in an audit.
The posture, written plainly — how your data is isolated, who can see what, and how change is governed. Including, honestly, the things we haven't built yet.
Six pillars.
Isolation is physical, not procedural
Each tenant is its own database — locally a directory, on the server a schema per tenant. A cross-tenant query is not merely forbidden by a filter someone could forget; it is unexpressible.
The control plane knows almost nothing
The vendor realm holds exactly two things about you: your company name and your users' email addresses. It never touches your planning data. Sessions live inside your workspace.
Authentication
scrypt password hashing with database-backed sessions and an httpOnly cookie. No edge middleware reaching your data. Keep at least two admins — self-serve reset is on the roadmap, not yet shipped.
Four eyes on change
Maker-checker: an override stays pending until a different person confirms; a release requires releaser ≠ approver, admins included. Freeze fences on released transfers, with audited breaks.
Everything is auditable
An append-only audit trail records decisions, overrides and fence-breaks. The whole product is built to explain itself — the audit is where that promise is kept for compliance.
Data residency
Customer data is stored and processed in India. Scale plans add region pinning and a signed DPA. See our DPDP page for the legal mapping.
What we have — and what we don't, yet.
| Control | Status |
|---|---|
| Physical workspace isolation | ✓ shipped |
| scrypt auth · DB sessions · httpOnly | ✓ shipped |
| Append-only audit trail | ✓ shipped |
| Maker-checker & freeze fences | ✓ shipped |
| Data residency in India | ✓ shipped |
| SSO (SAML / OIDC), second step, lockout, session limits | built · in review, not yet switched on |
| Password reset by an administrator's one-time code | built · in review |
| Self-serve password reset by e-mail | on roadmap |
| SOC 2 Type II | planned, not claimed |
We list what we don't have because claiming a control we haven't earned is the one thing this brand can't afford. See DPDP · Privacy.
Need the detail?
Book a walkthrough and we'll take your security team through isolation, residency and the audit trail on the real product.