opereq.

Security

Built for serious business records.

Opereq is designed around secure access, company isolation, role-aware workflows, and honest data states from the start.

Secure access

Account access is handled through Supabase Auth with protected application routes.

Workspace isolation

Customer workspaces are scoped by company membership so normal users do not see other customer data.

Role-aware workflows

Administrative areas are protected server-side and restricted to authorized roles.

Honest data states

Opereq labels missing information instead of inventing scores, revenue, or confidence.

Sensitive key handling

Service role credentials are used only server-side and are never exposed to the browser.

Internal data separation

Internal test data is isolated from normal customer workspaces.

Opereq does not claim formal security or compliance certifications that have not been verified. As the platform matures, security documentation will be updated to reflect only implemented controls.