Your inventory in its own vault.
Every company gets a separate database, two-step sign-in for every person, and backups we restore on purpose to prove they work.
No shared tables. Each request is checked against the right company before any data is read.
Required for every person, every role and every plan, the trial included.
Restore your data to any minute of the last 30 days.
Kept as 30 daily, 12 weekly and 12 monthly copies.
Nothing is shared between companies.
Separation is built into how the system is put together, not just a filter on a shared table.
Each workspace has its own database, created when you sign up.
The database proves which company it belongs to before anything is read or written.
Attachments sit in private storage under your company's folder and are only served after a permission check.
Once when the request arrives and again where the data lives.
The right people, and only them.
Sign-in uses an established identity provider. We never store your passwords or two-step secrets.
No one reaches your data until two-step sign-in is set up and passed.
Signed out after 30 minutes idle and after 12 hours in any case.
Role changes, exports, restores and viewing licence keys ask you to confirm again.
Remove a person or change their role and it takes effect on their next click.
We don't browse your inventory.
Our team has no routine access to your data. When support truly needs to look, it is limited, logged and you are told.
Read-only, at most 60 minutes, with a written reason.
Each look is recorded in an audit trail.
The workspace owner is told when it happens.
Our staff use security keys or passkeys, behind an extra gate.
A backup only counts if you have restored it.
Before opening to customers we rehearsed every step of a recovery on our test system, and we keep repeating the drills.
A backup restored into a separate database and checked, without touching the live one.
The workspace pointed at the restored database, with writes paused during the switch.
The switch undone, back to the original database.
The system's own registry rewound to an earlier point and checked.
More protections
Who changed what and when, kept for as long as your workspace exists.
Sealed with AES-256; each view needs a fresh check and is logged.
Every connection uses TLS.
Limits per person, per company and on sign-in slow down abuse.
Export everything to CSV at any time, including after you cancel.
Keys live in a secure store and are rotated every 90 days.
Security questions
On Cloudflare's network. Your database's main copy is in North America.
Not yet. We will say so here when we do. Until then, ask us anything and we will answer in writing.
Yes, at any time, as CSV. After cancelling you keep read-only access with export for 30 days.
Our services run across Cloudflare's global network, which routes around a failed location. Nightly backups and the 30-day rewind protect the data itself.
Questions about security?
Tell us what your company needs to see. We answer in writing.