Security

Sign-in and access

• Two-factor authentication (authenticator app) is required for every account, with one-time recovery codes
• Passwords are stored as salted hashes and must be at least 12 characters
• Repeated failed sign-ins lock the account and the source address for a while
• Six roles (owner, admin, accountant, warehouse, viewer, partner) decide which sections each person can open
• Accounting is limited to the roles that need it, and the warehouse role sees no money at all

Your data

• No buyer personal data is requested from Amazon
• Supplier invoices, receipts and bank statements are read on our own servers and never sent to AI
• The AI assistant sees only the data needed to answer the question, and only what your role allows
• Uploaded files are stored privately and served only to signed-in users with the right role

Infrastructure

• Hosted on DigitalOcean in Singapore, with a managed PostgreSQL database and private object storage
• All traffic uses HTTPS, and database connections verify the server certificate
• Nightly encrypted database backups kept off the server, with a tested restore
• Authentication secrets are encrypted at rest

Accountability

• Sign-ins, failed attempts and account changes are written to an audit log
• Price approvals are recorded with the person who made them

Report a vulnerability

If you believe you have found a security problem, email us and we will respond. Please give us a reasonable chance to fix it before you disclose it.