Security
Built for multi-tenant trust
Authentication
Email/password with email confirmation and Google sign-in.
Tenant isolation
Every record carries a tenant_id; database row-level security checks membership on every read and write.
Role-based access
Owner, Admin, PM, Member, Finance and Viewer roles enforced in the database, not just the UI.
Restricted compensation
Salary and burden data live in a separate table readable only by Owner and Finance roles.
Audit trail
Activity history recorded per organization.
SSO / SAML, MFA, passkeys
Planned for Enterprise tier.
AI data boundaries
AI suggestions will only read the caller's tenant and require approval before any change.