Security

Built for a small trusted team on a live ERP — correctness and least privilege over convenience.

Identity
Human console access uses Microsoft Entra SSO with passkeys for step-up. Devices enrol explicitly; an enrolled Mac is not required for every administrative action, but write authority stays role-gated.
Cin7 keys never on a laptop
Application keys for Cin7 are not cached in the desktop secrets blob. Device secrets are wrapped by an OS keychain key; plaintext credentials never sit in the local database.
Journaled apply
Every write is journaled before the API call, with bind-back in the confirming transaction. Soft-delete only (deprecated status). No silent half-writes; resume recovers by search before any recreate.
Where data lives
Coordination and journals live in managed Postgres (Sydney region). Release artefacts and intake blobs live in object storage. The public site is static — no authentication, no API calls, no live business data. Transport security includes HSTS on a preloaded domain.

Identity