- Every customer's data is isolated by row-level security in the database, tested automatically on every change.
- Encryption in transit and at rest. Card data never touches our systems; Stripe holds it.
- Secrets live only in environment variables. Access follows least privilege.
- Sign-in by email link, Google or Microsoft on your domain, with optional two-step sign-in.
- Rate limits and scraping detection protect the data. Exports carry marker rows.
The full summary and the procurement pack are on the security page.