Security & trust
A locked ledger, with your name on the key.
Isolation, encryption in transit, secure sign-in and precise permissions are in every plan — not an upgrade.
How your ledger is protected
Tenant isolation
Every row belongs to a farm; the database enforces it with row-level security, not just the code.
RLS + farm_id on every query
Encryption in transit
All traffic between your phone and our servers is encrypted. The farm portal also sends HSTS and a Content Security Policy.
HTTPS · HSTS · CSP
Passwords & sessions
Passwords are hashed with bcrypt, new accounts confirm their email, and sign-in uses separate account and farm tokens with refresh tokens.
bcrypt · email verification
Roles & permissions
100 permissions across 33 areas. A milker sees milk; a vet sees health.
Custom roles · e.g. Medical.View
Single sign-on
Google and Microsoft sign-in on every plan, with verified-email linking only.
OIDC ID-token verification · signature, issuer, audience
Audit trail
Every create, edit and delete is logged with who did it and when. Our team reviews the log; it isn't shown in the farm portal.
Who · action · when
Data ownership
Your data is yours. Take it with you.
Download your full farm data as JSON whenever you like, and export any report as CSV or Excel (PDF on Enterprise). Ask us to erase a farm and it is gone.
- Transport
- HTTPS · HSTS
- Isolation
- Row-level security per farm
- Auth
- Two-token · SSO · refresh tokens
- Passwords
- bcrypt hashing
- Hosting
- Cloudflare edge · API on Railway