Multi-tenant isolation
LiveEvery business row carries tenantId. API queries filter by tenant. Isolation is proven in e2e with a second shop login (owner@other.shop).
Trust center (lite)
Security and tenancy you can reason about
Shop data is operational gold. Isolation, least privilege, and clear secret handling are non-negotiable for a long-term SaaS. This page describes current controls and roadmap — not a compliance certificate.
Controls
What ships today vs roadmap
Live means in the multi-tenant product/demo. Roadmap is not claimed as production-complete.
Authentication
LiveJWT access tokens; dual-mode cookie + Bearer for app and automated tests. No secrets in client bundles.
Role-based access
LiveServer-side roles (owner, advisor, tech, and related) with least privilege by default. Advanced RBAC deepens on Scale.
Audit events
LiveSensitive mutations and repair-order stage changes write audit records for operator and compliance review.
Customer portal tokens
LiveScoped, passwordless links for estimate decisions — not permanent customer passwords shared across shops.
Deeper DB RLS
RoadmapApplication-level tenant filters today; database row-level security hardening is roadmap for high-assurance tenants.
SSO / SAML
RoadmapEnterprise packaging path for identity provider federation — not on Starter/Growth day one.
GDPR / data export jobs
PartialOpenAPI and operational export paths expand; formal DSAR automation jobs are roadmap.
Operating practices
- No secrets or tokens in git or marketing copy
- .env never committed; client only receives public URLs
- HTTPS in production deployments
- Rate limits on public booking and auth surfaces
- Honest status labels on integrations (never Connected for stubs)
This page describes architecture intent and current scaffold controls — not a SOC 2 attestation. Enterprise compliance packages will be contracted separately.
FAQ
Security questions buyers ask
Are you SOC 2 certified?
No SOC 2 attestation is claimed on this site. Enterprise compliance packages are contracted separately when ready.
How do I verify tenant isolation?
Request the access desk, open as owner@demo.garage, then owner@other.shop with the issued password. Data must not leak across tenants. Isolation is also covered in API e2e.
Where is data hosted?
Local/dev uses Docker Postgres. Cloud path targets GCP-style deploy for production tenants; private GCP is an Enterprise option.