Tenant isolation
Every business record carries an organisation identifier and access is enforced by database-level row security policies, not only by the interface.
Security
How SoftBela protects your business data.
Secret handling
Privileged keys, payment credentials and webhook secrets are stored in the backend secret store and are never shipped to the browser or to the hosting platform.
Privileged operations
Actions that require elevated rights run in audited server-side functions that validate the caller's identity and membership first.
Auditability
Sensitive actions are recorded with the actor, the resource, the time and the values before and after the change.
Reporting an issue
Email security@softbela.com with details. We acknowledge reports within one business day.