Security at Cayro
Tenant isolation
Every record belongs to one organization. Isolation is enforced twice: by authorization checks in our application and by row-level security in the database, so one customer can never read another's data.
Access control
Role-based permissions with location-level restrictions, checked on our servers for every request. Members can never grant more access than they have.
Accounts
Passwords are hashed with scrypt; two-factor authentication (TOTP) with single-use recovery codes is available to every user; sessions are revocable and are signed out after a password reset.
Audit trail
Sensitive actions are written to an append-only audit log that cannot be edited — not even by our own background systems.
Payments
Payments are processed by Stripe. Card details never touch Cayro servers, and subscription changes are only applied from verified Stripe events.
Reporting a vulnerability
Email security@cayro.app. We respond to every report.