Built to be trusted.

Every company has an isolated workspace, and every query is scoped to it. Roles and permissions are checked on each request, including real-time connections. Staff see only the records they are permitted to see.

Sign in with a passkey, a password, a magic link or Google, and add authenticator-app MFA. Sessions use short-lived tokens in secure cookies. You can end all sessions with one action, and each sign-in is recorded.

Access tokens, mailbox passwords, MFA secrets and webhook secrets are encrypted at rest, with a key-rotation process.

Private files live in private storage and are served through short-lived signed links. Uploads are checked, and a suspect file can be quarantined.

An accepted quote version and a signed document cannot be changed afterwards. Public links use random tokens, with expiry and revocation.

Commercial actions are written to an audit log whose entries are chained by hash, so tampering can be detected by a verification command.

Emails sent through Yachtbase keep a delivery record with a status timeline, and webhooks and payment events are recorded in the same spirit. Failed deliveries can be retried.

Client records carry consent status and can be archived or anonymised. Form submissions record consent, and visitor IP addresses are stored in hashed form. Expired data is purged on a schedule.

The AI assistant treats email content as untrusted input. It only proposes drafts and summaries, and never sends or changes records itself.

• Tenant isolation on every query
• Passkeys, MFA and a session kill-switch
• Encryption at rest, with key rotation
• Signed, expiring links for private files
• Immutable accepted and signed versions
• Hash-chained audit log
• Consent records and anonymisation