Built on trust, not promises.
Security claims you can actually verify — nothing overstated.
Blinds Base is multi-tenant software: many blinds and curtains businesses run on the same platform, each under their own account. That only works if your data is genuinely walled off from every other business on it — the five areas below are exactly how that separation, and everything else protecting your account, actually works.
Tenant isolation
Strict tenant isolation is enforced at both the database and application layers. Your business's data is never mixed with, or readable by, another business on the platform. Every query is scoped to your organisation's own ID, and that scoping is enforced by Postgres row-level security policies at the database itself — not only by application code that a page-level bug could bypass.
Authentication & permissions
Every account signs in through a secure authentication system. Fine-grained, per-account permission controls let a business owner grant or restrict access to any feature for any staff member. Four built-in roles — CEO, office, fitter and manufacturer — each start with a different default set of permissions, and any individual permission can be overridden for any one staff member without needing a developer.
Encryption & secrets
Third-party credentials and other secrets are encrypted at rest and are never exposed to a browser. Connected integrations such as Gmail and Facebook have their OAuth tokens encrypted with AES-256-GCM before they ever reach the database, using an encryption key that is itself never stored in that database — a raw copy of the table alone would reveal only ciphertext.
Audit logs
Meaningful actions in your account are recorded to an append-only table that no staff account can edit or delete — who changed what, and when. A write that fails is retried automatically, and on the rare occasion it still can't be recorded, that failure is itself written to a separate record your team can review, rather than silently disappearing into a server log.
GDPR-ready controls
Blinds Base is designed with GDPR-ready controls, including a published Privacy Policy and a Data Deletion process for end-customer rights requests. Both are kept reachable at all times, independent of any account sign-in, so a customer or reviewer can always find them.