Security & Multi-Tenancy

Tenant isolation

Every business entity carries a CompanyKey. Queries are filtered by tenant automatically, so one company's data is never visible to another. Cross-tenant access is only ever possible through explicit, audited permissions.

Role-based access control

A full user-management system delegates access by role, department and resource. Report visibility, management rights and database access are all controlled per user or group.

• View / Manage / Delete and custom business permissions
• Department-scoped access with multi-tenant validation
• Restrict who can author reports or reach a database

Authentication

Multi-tenant-aware authentication supports OAuth providers and integration with your existing user logins, plus login lockout, password policies, reauthentication timers and ReCaptcha.

Auditing & transparency

Comprehensive logs give per-tenant transparency: report and email queues, users online, URL requests and system issues. Data is encrypted in transit and at rest.

White-label

Each tenant is fully brandable: logo, favicon, theme colors, company name and domain, with iOS & Android apps included, so you ship a product that is unmistakably yours.