Security & data
Three walls between your data and everyone else’s.
Tenant isolation is not a setting we can forget to tick. It is enforced three times on every single request, and the last one is the database itself.
Request guard
Every call is bound to exactly one workspace before it reaches a service. No workspace on the request means no request.
Query scoping
Tenant filters are applied in the data layer, not left to whoever wrote the endpoint. A missing filter is a build failure, not a leak.
Postgres row-level security
The database refuses cross-tenant reads on its own. If both layers above were bypassed, the rows still are not there.
Encrypted integration credentials
Payment and messaging keys are encrypted at rest with a separate key, and are write-only once saved.
Full audit log
Who changed what, when, and from where — including deletions, refunds and permission changes. Exportable.
GDPR export & erase
Per-client export and erase from the client record, plus a whole-workspace export any time.
Backups with PITR
Continuous backup in the same EU region, restorable to any point in the retention window.
Role and record scope
Module × action permissions, then record scope on top: own, own team, or everything.
Time-boxed support access
Our staff cannot read your data without a grant you issue, and it expires by itself.
Sub-processors
Everyone who can touch tenant data on our behalf, and why. We are a processor of your clients’ data; you are the controller. The Data Processing Addendum is part of the Public Offer you accept at sign-up. A gateway or carrier you connect on your own account is your processor, not ours.
| Processor | Purpose | Region |
|---|---|---|
| DigitalOcean | Hosting, database and file storage | Germany (Frankfurt) |
| Cloudflare | CDN, DNS and WAF | EU edge |
| Sentry | Error reports | EU |
| LiqPay | Card payments for your licence | Ukraine |
| monobank | Card payments for your licence | Ukraine |
| Paddle | Card payments for your licence in euros and dollars, as merchant of record | United Kingdom |
| Checkbox | Our own ПРРО: the receipt for each hryvnia payment of your licence | Ukraine |
| TurboSMS | SMS on our own account | Ukraine |
| Brevo | EU | |
| Expo | Push notifications to the phone apps | United States |
| Anthropic | AI features, only if you switch them on | EU and US |
Move your bookings off paper, WhatsApp and three spreadsheets.
Bring your clients, services and past visits in from a spreadsheet or your old system’s export, with a preview before anything is written — and help in chat, in six languages, whenever you want it. Most studios are live the same day.