Security
Your businesses' records deserve serious protection.
This page describes the security controls we have enabled today. It is maintained by the MultiBiz team and is not a certification or audit report.
Authentication
Email/password and Google sign-in with session management and secure token handling.
Per-user data isolation
Database policies scope every record to the authenticated user and their business memberships.
Encrypted storage
Files and database records are encrypted at rest and in transit by the hosted platform.
Role-based team access
Owner, admin, bookkeeper, and viewer roles scope access to specific businesses.
Least-privilege service access
Server-side operations use narrowly-scoped keys; sensitive keys are never shipped to the browser.
Ongoing monitoring
Security scans, dependency updates, and access audits are part of our routine maintenance.
Shared responsibility
MultiBiz secures the platform. You are responsible for your account credentials, the people you invite, the roles you assign, and the accuracy of the records you upload. Learn more in our Privacy Policy and Terms of Service.