Built to protect your business
Security isn't a bolt-on. Multi-tenant isolation, encryption, and least-privilege access are designed into Servtide from the ground up.
Per-business data isolation
Every business is isolated at the database level with PostgreSQL row-level security (forced), so one company can never see another's data.
Encryption in transit & at rest
Traffic is served over HTTPS; sensitive third-party tokens are encrypted at rest with AES-256-GCM.
Modern authentication
First-party email/password with hashed credentials and signed sessions. The super-admin console requires TOTP multi-factor auth.
Payments done right
Card data never touches our servers — payments run through Stripe with hosted, PCI-compliant flows.
Audit logging
Sensitive actions are recorded to an append-only audit trail for accountability.
Least-privilege access
Fine-grained roles and permissions, plus a non-superuser database role at runtime so isolation is always enforced.
Fail-safe configuration
In production the app refuses to start with missing or weak secrets — misconfiguration can't ship insecurely.
Backups & portability
Your data is yours: export to CSV anytime, with optional backups to your own OneDrive or Google Drive.