Role-based access control across every module
Decide who sees what, per module and per action — checked on the server every time, not hidden in the interface.
No card · No trial clock · Export everything · Cancel anytime
Per resource, per action
Permissions are granted as view or manage on each module, so you can give a bookkeeper invoices and expenses without staff records, or a site manager their location without company finances. It's the difference between delegating properly and giving someone the keys to everything.
Enforced on the server, not in the interface
Hiding a menu item isn't access control. Every request is checked server-side, and beneath that PostgreSQL row-level security isolates each organisation's data at the database, deny-by-default. A bug in a handler still can't return another company's rows.
- Checked on every request, not just in the UI
- Row-level security on every tenant table
- Deny-by-default rather than allow-by-default
And a record of who did what
Every create, update and delete is written to the activity log with the user who made it. Permissions decide what someone can do; the log tells you what they did.
Works with
- StaffYour team, their roles, their departments and their salary history — in the same system as the work they do.
- Activity logEvery create, update and delete recorded with who did it — searchable by person, record and action.
- InvoicingSend a compliant invoice in your customer's language in under a minute — and keep every one of them in the same place as the customer, the product and the payment.
- LocationsRun more than one site with its own staff, assets and bookings — and decide who sees which one.
Roles & permissions — common questions
Does it support SSO or SAML?
Can I restrict someone to specific customers or records?
Is access control included on the free plan?
Still deciding? Book a demo
Start free. Scale as you grow.
Run your whole business in one place — and pay for it like a founder, not an enterprise.
No card · No trial clock · Export everything · Cancel anytime