Per-firm isolation
Your data never sits in a shared, unguarded pool. It is fenced off at the database layer, not just in application code.
- Every row we store carries a firm_id that ties it to exactly one account.
- PostgreSQL Row-Level Security policies scope every read and write to your firm only — the database itself refuses to return another firm’s rows.
- These policies are enforced server-side, so a bug in one screen can’t leak another tenant’s data.
- We wrote SQL tests that assert one firm cannot see or modify another firm’s records, and ran them before launch.
Encryption
Data is protected both while it moves and while it rests.
- All traffic between your browser and our servers is encrypted in transit with TLS (HTTPS).
- Data at rest is encrypted by our database provider’s storage layer.
- We don’t transmit dashboard data over unencrypted channels.
Access control
People and services get the least access they need to do their job — nothing more.
- Every user has a role: owner, admin, staff, or read-only. Roles gate what each person can view and change.
- We follow least-privilege: read-only users cannot alter your roster, settings, or records.
- Privileged service-role database keys live only on the server. They are never shipped to, or reachable from, the browser.
- The browser talks to the database through the same Row-Level Security policies every user is subject to.
Your data is yours
We treat your call records as something we hold for you, not something we own.
- You can request a full export of your data, or its deletion, at any time.
- We never sell your data, and we don’t share it with third parties for advertising.
- Call records are used for one thing only: computing the dashboard, scorecards, and revenue figures you see in your account.
Billing security
We deliberately keep the most sensitive payment data out of our systems.
- Payments are handled by Stripe, a PCI-DSS Level 1 certified processor.
- Card numbers are entered directly with Stripe — we never see or store them.
- We keep only a customer reference and subscription status, never raw card data.
Ready to see your numbers?
Start a 7-day trial. We seed a realistic demo for your trade, and your data stays fenced off to your firm alone from the very first login.
Have a specific security or compliance question? We're happy to answer it before you sign up.