Skip to content

Security

Authentication uses Supabase Auth. Café data is isolated by organization with row-level security enforced in the database. Role-based access is enforced server-side — navigation visibility is not security.