Security & privacy
Private financial documents deserve workspace isolation, not shared folders.
- Row-level security on every workspace-scoped table
- Private storage bucket; downloads via short-lived signed URLs
- Service-role keys stay server-side; publishable keys only in the browser
- Audit history for significant record, document, and split changes
- Soft-delete with retention before purge; portable export on request
See the Privacy and Terms pages for retention and acceptable-use details.