Security
Protecting accounts, offers and documents
Security is enforced on the server and in the database, not only in the interface.
Data access
Row-level security policies control every read and change.
- A supplier offer is only visible to its author and the relevant buyer
- Messages are limited to conversation members
- Administration requires an administrator role
Accounts
Sessions use authentication with email confirmation, password recovery and company-role controls.
Files and abuse
File formats, signatures, sizes and attachment counts are checked. Sensitive writes are rate-limited and server errors are logged.
