Security

Your customers' data, kept to itself.

CaterTrack is multi-tenant by design — strict isolation, granular permissions, and modern authentication keep each business's data private while your team stays fast.

Role-based access control

Group- and business-level role templates (owner, admin, manager, staff, viewer) gate every action with explicit, resource-level permissions — no wildcards.

Strict tenant isolation

Every group is a hard data boundary. Requests carry tenant context and queries are group-scoped, so one business can never see another's data.

Modern password hashing

Passwords are hashed with Argon2id and legacy hashes are transparently upgraded on next login. Sessions use short-lived access tokens with refresh rotation.

Encrypted connections

All traffic is served over HTTPS with HSTS, secure httpOnly cookies, and hardened response headers (CSP, frame, and content-type protections).

Our commitment

Security you can explain to your clients.

When a customer asks how their event details and payments are handled, you have a clear answer — isolation, encryption, and role-based control built into the platform.

Get started

Data encrypted in transit (HTTPS + HSTS).
Permission checks enforced on every endpoint.
Sensitive billing access limited to owners and admins.
Soft deletes keep an audit-friendly record trail.