Security and your data

Isolation

Which workspace a request belongs to is never taken from the request itself. It comes from your session or from the API token. Every table with workspace data carries a row level security policy, and the application connects to the database with a role that cannot bypass those policies. A query that loses the workspace context returns nothing at all: it fails closed, never open.

Audit trail

Relevant actions are recorded as audit events. Each event carries the hash of the previous event of the same workspace, forming a chain: changing one line invalidates every line after it. Update and delete on those tables are blocked by a database trigger, so the guarantee does not depend on anyone remembering a rule. Nobody rewrites what happened: not us, not by accident, not under pressure.

Export

Contacts, deals and history export on every plan, including the free one. The exit door stays unlocked. That is how you build a reason to stay.