Every tenant’s data, isolated by design.
Row-level security on every table, encrypted secrets, and accounting connections that request only the scopes the product needs.
Built the way a construction SME’s finances deserve
Multi-tenant isolation
Every table is scoped by tenant with row-level security at the database — one customer’s jobs and financials are never visible to another.
Least-privilege accounting scopes
Valtrail requests only the Xero permissions it needs — never broad catch-all access for convenience. Further providers follow the same least-privilege pattern when they ship.
Encrypted at rest and in transit
Tokens and financial credentials are encrypted; browser and API traffic is TLS-only.
Role-based access
Fine-grained roles mean staff only see the commercial and field data their role needs.
Data retention, done properly
Financial records and audit logs are retained and purged on a documented schedule aligned to UK requirements.
Hosted on established infrastructure
Built on Supabase (Postgres) and Cloudflare — not a bespoke, unaudited hosting stack.
Security questions before a walkthrough? Talk to us.
Product and site are in build and sign-off — not a live public service yet.