Security & trust
Your data is yours. Every table is tenant-scoped, every event is signed, every change is auditable end to end.
End-to-end RLS
Every domain table carries a tenant_id and a row-level-security policy. Tenant isolation enforced at the database, not in application code.
Ed25519 event signing
Every event written to the append-only log is signed by the originating tenant's keypair. Tampering is detectable across the entire history.
Daily backups
Encrypted Postgres backups every 24 hours. 30-day retention by default.
Opt-in crash reporting
Crash reports carry a stack trace, the app version, and an anonymous install ID — never a tenant or user identifier, never customer data, prices, or PII. A scrubber enforces this on every report, and it's opt-in.
GDPR-aligned privacy
Egypt has no GDPR equivalent, but we follow EU posture: explicit consent, data export, right to deletion, transparent processing log.
Append-only event log
Edits are emitted as `.amended` events. Originals are never mutated. The full history is reconstructable from the event stream.
X-Tenant-Sig request signing
Every cloud API call carries a per-request signature derived from the tenant's keypair, validated at the edge before reaching the database.
No behavioral telemetry
Zero session replays, no usage funnels, no third-party analytics. We don't watch what you click.