Role-based access control across every module
Decide who sees what, per module and per action — checked on the server every time, not hidden in the interface.
No card · No trial clock · Export everything · Cancel anytime
Per resource, per action
Permissions are granted as view or manage on each module, so you can give a bookkeeper invoices and expenses without staff records, or a site manager the staff and asset registers without company finances. It's the difference between delegating properly and giving someone the keys to everything.
Enforced on the server, not in the interface
Hiding a menu item isn't access control. Every request is checked server-side, and beneath that PostgreSQL row-level security isolates each organisation's data at the database, deny-by-default. A bug in a handler still can't return another company's rows.
- Checked on every request, not just in the UI
- Row-level security on every tenant table
- Deny-by-default rather than allow-by-default
And a record of who did what
Every create, update and delete is written to the activity log with the user who made it. Permissions decide what someone can do; the log tells you what they did.
Works with
- StaffYour team, their roles, their departments and their salary history — in the same system as the work they do.
- Activity logEvery create, update and delete recorded with who did it — searchable by person, record and action.
- InvoicingSend a compliant invoice in your customer's language in under a minute — and keep every one of them in the same place as the customer, the product and the payment.
- LocationsRun more than one site with its own staff, assets and bookings — each on the map, with its paperwork attached.
Roles & permissions — common questions
Does it support SSO or SAML?
Can I restrict someone to specific customers or records?
Is access control included on the free plan?
Still deciding? Book a demo
Start free. Scale as you grow.
Run your whole business in one place — and pay for it like a founder, not an enterprise.
No card · No trial clock · Export everything · Cancel anytime