Tenant isolation
Every organization-owned record carries an organization ID, with server authorization and PostgreSQL Row Level Security.
Trust comes from boundaries you can verify.
QuoteFlow’s architecture treats organization isolation, customer access, financial calculations, and operational traceability as core product requirements.
Private documents
Quote attachments, deposit proofs, signatures, and generated PDFs use private buckets and short-lived signed URLs.
Secure public access
Customer quote links use high-entropy tokens stored as hashes, with revocation, rotation, expiry, and rate limiting.
Least-privilege secrets
Service keys, billing credentials, and webhook secrets stay on the server and are never exposed through browser variables.
Verified integrations
Resend and PayMongo events are signature-checked, stored idempotently, and protected from duplicate delivery.
Traceable changes
Status transitions, privileged access, approvals, and financial actions produce append-only business and audit events.
Clear compliance language
QuoteFlow records practical electronic acceptance evidence. It does not claim certification or advanced legal compliance that has not been independently audited.