Security

Tenant isolation

Every workspace is a separate tenant. Plans and data are scoped to your workspace; cross-workspace access is denied by design.

Access control

Access is governed by roles and permissions, and sensitive actions are recorded in an append-only audit trail.

Authentication

Passwords are hashed, sessions are signed, and requests are protected against cross-site request forgery.

Data integrity

Because every figure is computed once and read everywhere, the documents cannot silently disagree — a property we treat as a security and trust feature, not just a convenience.

Reporting an issue

Found a vulnerability? Please reach out via the contact page so we can address it quickly.