Security
How we protect your business data.
This page describes the safeguards that are built into PrismSwift ERP today. We do not claim certifications we do not hold.
Data isolation
Each business's data is kept separate.
Tenant isolation in the backend
Every query is scoped to your business in the application layer.
PostgreSQL row-level security
A second layer of isolation enforced by the database itself, so a missed filter in code cannot expose another tenant's rows.
Role-based permissions
Admin, Accountant, Inventory Manager and Sales Manager roles control who can view and change what.
Account security
Sign-in and sessions handled carefully.
Argon2 password hashing
Passwords are hashed with Argon2; we never store them in plain text.
Secure, HTTP-only cookies
Session cookies are HTTP-only and secure, so page scripts cannot read them.
Session revocation
Sessions can be revoked, ending access from that browser or device.
Rate limiting
Sign-in and other sensitive endpoints are rate limited to slow down automated attacks.
Two-factor sign-in for platform administrators
Our internal platform administrator accounts support authenticator-app (TOTP) two-factor sign-in, with separate accounts, individually assigned permissions and audit logs.
Encrypted transport
All traffic to the application is served over HTTPS.
Transparency
You can see who has access.
Audit logs
Key actions in your workspace are recorded with who did them and when.
Controlled support access
If our support team needs to look at your workspace, access is time-limited, read-only and audited — and you can see it and revoke it at any time.
Data retained on suspension
If your subscription lapses, your workspace is suspended, not deleted. Your data is retained.
Reporting a security concern
If you believe you have found a security issue, please email [email protected] with details. Please do not access data that is not yours or disrupt the service while investigating.
Bring invoicing, accounting and tax prep into one workspace.
Start a free trial, set up your company and tax profile, and send your first invoice the same day.