Tenant isolation
PostgreSQL Row Level Security derives access from active membership and validates parent and child organisation IDs.
Security
Security designed for high-sensitivity workforce data
Tenant isolation, least privilege, private documents, audit trails and explicit support access form the product baseline.
Sensitive data
Recoverable identifiers and bank details are designed for envelope encryption, masking and access-specific audit events.
No invisible support access
Platform operators do not receive customer-record access. Support access is requested, scoped, time-limited and audited.