Security & data isolation

Multi-tenancy and PII handling are built into the architecture from day one.

Tenants are resolved by domain and isolated at the row level. One agency can never see another's data.

All traffic is TLS-encrypted, with extra encryption on sensitive staff console calls. Field-level encryption at rest is on our roadmap.

Staff only see their agency's data, and can be limited to their own clients.

After verification the client portal is read-only and changes go through staff; you decide file by file what clients can see.

Human verification on client intake and rate-limited email sign-in codes.