Row-level security
The database is the tenant boundary; one business cannot read another's rows even through a bug.
Security and compliance
Built for data other people are entitled to rely on.
Mobile-OTP sign-in
The GST-registered mobile is the identity.
Roles that mean something
Owner, manager, accountant, staff, read-only and chartered accountant; what each may write, review or administer is enforced in the database, not the screen.
DPDP
Consent records, data-principal requests with a 90-day SLA, retention floors, legal holds and a breach register.
Credentials stay server-side
GSP keys, the WhatsApp token, payment secrets and the token that lets the app send from your Gmail never reach a browser or a phone.