How customer data is protected
Application data lives in a Postgres database where every table that holds tenant data carries a row-level-security policy. The application authenticates as the end user; the only paths that bypass RLS are explicit admin-client calls, and a custom ESLint rule fails CI when an admin-client SELECT lacks a tenant filter.