Trust
Security
FranchiseFlow is being configured with least-privilege access controls before account provisioning.
Controls currently enforced
- HTTPS delivery through the production hosting platform.
- Supabase Row Level Security on application tables.
- No Supabase service-role or secret key is shipped to the browser.
- Public intake records permit insert-only access; public reads, updates, and deletes are denied.
- Protected HQ and franchisee areas validate authenticated roles before rendering operational content.
Reporting concerns
Use Support to report a suspected security issue. Do not include passwords, API keys, or other secrets in a support submission.