How we keep every company's data separate and safe
Two layers of tenant isolation down to the database, encrypted payment keys and certificates, private rental documents, rate limits and nightly encrypted backups.
Many companies share one SaaSGarage platform. None of them can ever see another's data. Here is how — in plain words.
Two locks on every door
- In the application, every record belongs to one company, and every query is automatically limited to the company you are signed in to.
- In the database itself, every company table has row-level security switched on and forced. Even if a query were written by hand and forgot the filter, the database would refuse to return rows of another company.
The application connects with a restricted database user that can't switch these rules off — and it refuses to start if it ever could.
Secrets stay secret
- Paysera keys and fiscal certificates are encrypted before they are stored.
- Identity documents, inspection photos, contracts and signatures are private. They never appear in the public gallery and are only served to people who are allowed to see them.
- Old private media is purged after the retention period.
Protection against mistakes and abuse
- Public forms are rate-limited.
- Bookings are idempotent — a double click never creates two bookings or two payments.
- Payment confirmations are verified by signature before they change anything.
- Only the platform's own gateway may tell the backend which website a request came from.
Backups
The database is backed up every night, encrypted with AES-256, and kept for 30 days.
Your data is yours. When a subscription lapses, the admin is locked, but nothing is deleted — it reopens as soon as the plan is renewed.