Checked on the server
Who can see and change what is enforced by database security rules for every request — not just hidden in the screens.
All plans
Security
Your proposals hold prices and client details. We protect them like it.
Invitation only
People join your workspace only with a personal, single-use invitation link from your Admin.
All plans
Google sign-in
No passwords to leak. Accounts are protected by Google, including 2-step verification. Inactive sessions sign out automatically.
All plans
AES-256 encrypted storage
Proposals, prices, client details, products, documents and pictures are encrypted in your browser (AES-256-GCM) before they are saved. The database, its backups and the hosting console only ever see unreadable text, and every record is tied to its own place so it can't be swapped.
All plans
Encrypted in transit
Every connection uses HTTPS with HSTS, on Google Cloud in India (Mumbai).
All plans
Sealed enquiries
Contact-form messages are locked with your company's public key (RSA-3072) in the visitor's browser. Only your Admins can open them.
All plans
No copies left behind
Nothing readable is stored in the browser. Signing out, closing the tab or 4 hours of inactivity leaves nothing on a shared computer.
All plans
Protected backups
Backup files are encrypted with a password you choose (AES-256, 600,000-round key stretching).
All plans
Payments by Razorpay
When paid plans open, card, UPI and bank details are entered on Razorpay's PCI-DSS certified checkout — they never reach our servers.
All plans
Least privilege
New work is private by default; Admins choose what is shared. Approved proposals are locked.
All plans
Security log
Sign-ins, invitations, role changes and deletions are recorded and cannot be edited.
All plans
Injection-safe
Everything users type or paste is cleaned before it is shown; links and pictures are checked.
All plans
Security headers
Content-Security-Policy, framing protection, HSTS and more on every page.
All plans
OWASP Top 10
The app was reviewed and tested against all ten OWASP Top 10 (2025) categories before launch.
All plans