Your recipes, costs, and customer records are the heart of your business, and we treat them that way.
Isolated at the database layer
Every workspace is separated by row-level security — enforced by Postgres itself, not just our application code. One brand's data cannot be reached from another's session, even if the app has a bug.
Passwordless sign-in
You sign in with a magic link sent to your email. There is no password of yours to guess, reuse, phish, or steal in someone else's breach.
Integration credentials, double-encrypted
Connections to Xero, QuickBooks, Shopify, Toast, Square and every other integration are encrypted at the application layer with AES-256, on top of disk encryption — and they never reach your browser.
Encrypted in transit
All traffic runs over TLS. Our infrastructure providers — Supabase, Netlify and Stripe — are SOC 2 audited.
We never see your card
Billing runs entirely on Stripe. Card numbers go to Stripe directly and are never stored on, or passed through, our systems.
Scoped, expiring access
Buyers and certifiers get read-only views of exactly what you choose to share — time-limited, revocable, never your whole account. They see certifications, drill results and documents; never your costs, margins or customer list.
Your data, exportable
Full export whenever you like — recipes, lots, movements, documents, all as CSV. Records are retained to meet the FDA two-year requirement. No lock-in, ever.
SOC 2 aligned
Our controls are built to SOC 2 Type II criteria, with independent audit on the roadmap. We say plainly what we have and haven’t done yet — anyone claiming otherwise at our stage is guessing.
Backups and access logging
Encrypted, geographically redundant backups daily, plus seven-day point-in-time recovery. Administrative actions and every shared-document view are logged with who and when.