Security & Compliance

How we protect your industrial planning data.

1. Multi-Tenant Data Isolation

Our core database leverages PostgreSQL **Row-Level Security (RLS)** in Neon Lakebase. This ensures that every SQL query executed on behalf of a user is strictly restricted to that user's active organization ID, preventing any cross-tenant data leaks.

2. Server-Side Request Verification

All scheduling updates and file saves invoke TanStack Start `createServerFn` endpoints. These endpoints require a verified client JWT token, validating the signature against Neon Auth before processing any backend file transfers.

3. Encryption & Storage

All data is encrypted in transit using TLS 1.3 and at rest inside S3-compatible cloud storage buckets and encrypted PostgreSQL disks. Regular backups are automated to secure scheduling continuity.