Security
How client data is protected
Sensitive family financial information is protected at every layer, from sign-in to the database to the reports you share.
Organization isolation
Every client, calculator and document belongs to one organization. The database itself refuses access across organizations.
Deny-by-default permissions
Row-level security checks every request. Only active members see data, and suspended members lose access immediately.
Roles and delegated access
Owners and admins manage the team and decide who may edit organization details, send invitations or view activity.
Secure sign-in
Email confirmation, leaked-password screening, and authenticator-app two-step verification support.
Private file storage
Logos and documents are stored privately and shown only through short-lived signed links.
Append-only activity log
Key changes are recorded automatically and cannot be edited or erased from the app.
Tamper-resistant reports
Exported results are recalculated on the server and saved as immutable snapshots with rule and table versions.
Recoverable deletion
Scenarios and documents are soft-deleted first, so accidental removals can be reviewed before permanent purge.