Security & trust
Your books, your stock, your customer list
You are being asked to put the operating record of your business into someone else’s software. Here is exactly how it is protected, in plain terms you can check.
Your data is isolated at the database
Every table carries a tenant. Every query is scoped in the repository layer, and PostgreSQL row-level security is switched on underneath as a second net — so a bug in application code still cannot return another company’s rows. We test this by running the suite as a non-superuser and trying to read across tenants.
Passwords are hashed with Argon2id
Never stored, never logged, never recoverable — a reset issues a new one. Sessions use short-lived access tokens with rotating refresh tokens, and reusing an old refresh token revokes the whole family.
Every state change is audited
Who did it, what changed, when, and from where — written in the same database transaction as the change itself, so an action cannot succeed without its audit entry. The log is append-only, enforced by a database trigger rather than a promise.
Financial records cannot be edited
Issued invoices, stock movements and ledger entries are immutable. A database trigger refuses UPDATE and DELETE outright. Corrections are new documents — a credit note, a reversing entry — which is how an auditor expects to find them.
Encrypted in transit, everywhere
crateline.app is on the HSTS preload list, so browsers refuse to connect over plain HTTP before a request is even made. There is no unencrypted fallback to misconfigure.
Files move by short-lived signed URL
Documents and images are never served from a public bucket. Uploads and downloads use signed URLs that expire in fifteen minutes, scoped to your tenant’s own object prefix.
What we are not claiming
Plenty of software in this category displays certification badges it has not earned. We would rather tell you where we are.
-
We do not hold SOC 2 or ISO 27001 today.
Those audits are on the roadmap as we grow. If your procurement process requires one now, we are not yet the right supplier and we will say so rather than waste your time.
-
Your data is yours, and it leaves with you.
Items, customers, stock and transactions export as CSV whenever you want, trial or paid. An export button is worth more than a promise about lock-in.
-
You choose where your data lives.
Tell us the region you need for your market’s requirements and we will confirm what we can host before you sign anything — rather than after.
Questions your IT person would ask?
Send them our way. We would rather answer a hard technical question early than discover a blocker at go-live.
14 days · no card · export your data any time
