Security

ReputationOSHQ is multi-tenant by design. Every operational record is scoped to an organization, business, and (where applicable) location, and every read and mutation is validated on the server against the caller's memberships.

• Row-level security enabled on every operational table.
• Role model split across dedicated tables — user-profile fields never carry roles.
• Platform ownership isolated in a dedicated table; not assignable through organization or location memberships.
• Append-only audit trail. Client code never writes audit events directly.
• Anonymous callers can only reach a hardened public resolver for short-code lookups; raw tables are never exposed.
• Least-privilege server functions with tenant validation on every action.