IMPROVED

Security hardening

Closed every critical finding from our security audit ahead of launch.

What shipped in this release

1 feature — each links to its full page.

Row-Level Security & Hardening

Every operator's data is isolated at the database level — not just in application code.

  • PostgreSQL row-level security enforced on all tables — not just application middleware
  • Each operator's data is isolated by location_id at the database level
  • Security audit covered reservations, guests, financial data, and PII tables