Security
Your business data
stays your business.
ConfigBiz is built for SME operations where trust matters — payroll, stock, customer lists and money. We isolate every workspace, encrypt sensitive data and give you control over who sees what.
Security at a glance
What protects your workspace
Isolation
Every query is scoped to your workspace via RLS — no tenant can read another’s rows.
Encryption
Sensitive fields encrypted at rest; all traffic over TLS.
Access
Role-based access with least privilege — staff see only what they need.
Portability
Export your data anytime. No lock-in, no hidden retention.
How ConfigBiz secures your operation
Built on Supabase Postgres with defense-in-depth — from database policies to product controls.
Row-Level Security (RLS)
Every table enforces workspace-scoped policies. Even with a valid session, you can’t read outside your organization. Policies are tested with every migration.
Encrypted storage
Sensitive data encrypted at rest. Secrets and tokens never logged. Backups encrypted and isolated per workspace.
Role-based access
Owner, admin and member roles with per-capability and per-entity permissions. Configure who can view, create, edit or approve.
Audit trail
Who changed what, when — for configuration, approvals and data edits. Exportable for compliance or review.
Private AI
ConfigBiz AI uses your description to configure your workspace. Your business data is not used to train models and never leaves your tenant boundary.
Operational controls
MFA-ready auth, session management and rate limiting. Abuse protection on public endpoints like ConfigBiz AI.
For Owners Evaluating Any Vendor
Questions Worth Asking Before You Trust A System
You do not need a technical background to judge security. Ask these questions in plain language and expect clear answers. Vague replies are a signal to look closer.
Can One Customer Ever See Another Customer Data?
Ask how workspaces are separated. In ConfigBiz the database enforces it with row level policies, so a query outside your workspace returns no rows.
Who Can See Payroll, Prices And Supplier Terms?
Ask how roles work. Give staff the least access they need and review who holds admin rights when someone leaves.
What Happens When Someone Changes A Record?
Ask for an audit trail. You should be able to see who changed stock, approvals or payments, and when.
Can You Take Your Data With You?
Yes. Org admins can download workspace records in Excel (.xlsx) and CSV (.csv) from Manage Workspace → Data Hub at any time, without asking permission. Templates and validation guidance are built in for import, and exports respect your workspace permissions.
What “no cross-tenant” actually means
Many SaaS platforms filter by organization in application code. ConfigBiz enforces it in the database. Every query includes a workspace check at the policy layer — if the check fails, Postgres returns no rows, not an error you can work around.
- Workspace id is part of every RLS policy — not just a WHERE clause in the app.
- Service keys never ship to the browser; the client uses anon key + RLS.
- Automated checks ensure new tables can’t be created without policies.
Your responsibilities — kept simple
Security is shared. We handle platform controls; you control access.
Have a security question?
If you need a DPA, data processing details or want to discuss a specific compliance need, we’ll answer as a business advisor — clearly and without enterprise jargon.