Security
Enterprise-grade data isolation and access control for regulatory product data.
Row Level Security
Supabase PostgreSQL with RLS policies ensuring customers can only access their own organisation data.
Authentication
Supabase Auth with secure session management. Dashboard routes protected via middleware.
Document storage
Private document storage by default. Documents are not exposed on public passport pages.
Audit logging
Significant actions logged with user, entity, and timestamp for traceability.
Infrastructure
Vercel-compatible architecture with environment-based configuration. No secrets in source code.