Platform
Your data lives in its own house
A dedicated database per customer, least-privilege access enforced in the database itself, and audits that run on every release rather than once a year.
One customer, one environment
Your community runs on its own deployment with its own database, storage, authentication and email identity. No other organization's data is in your database, and no tenant ID separates you from anyone else because there is no anyone else.
No shared tablesIsolation is physical, not a filter clause.
Your own authEmail and password, magic link, OAuth, and SSO when you need it.
Your own domain and senderMembers see your address on every email.
Your own keysIntegration credentials are stored as infrastructure secrets, never as editable settings.
Least privilege in the database
Access rules are written in the database, not only in the application, so they hold on every path: the app, the API, a script, a mistake.
Row-level security everywhereEvery table members can touch carries policies; anonymous visitors hold no write access on anything.
Writes through vetted functionsSensitive tables accept writes only through server-side functions that check who is asking.
Automated grant auditsEvery release re-checks which roles can read and write which tables and fails if the answer changed.
Public payloads projectedWhat a signed-out visitor receives is an explicit field list, never the whole row.
Operations
Daily backupsPoint-in-time recovery on the database, versioned storage.
Same version everywhereOne platform release, tested, then rolled to each deployment. No customer runs a fork.
Migrations rehearsedEvery database change executes against a throwaway copy with your real permission model before it reaches you.
EncryptionIn transit and at rest.
Health you can seeVersion, migration status, failed jobs and email deliverability in your admin console.
Accountability
Admin audit logModule changes, branding, locale, roles, integrations and moderation policy changes are recorded with actor, time, before and after.
Super Admin actionsThe most powerful role leaves the clearest trail.
Privacy by defaultPrivate profiles stay private, public reviews are anonymised for visitors, and moderation flags are never exposed.
Your data is yoursExportable on request, deleted on termination.
What we don't claim
Beakforce is a small company. We'll tell you exactly which controls exist and show you the audit output rather than hand you a badge. If your procurement needs a specific certification, ask us before you buy, not after.
