Security

• Passwords are at least 12 characters and are checked against known breaches without sending your password: only a 5-character hash prefix leaves our servers.
• Email verification.
• Two-factor with an authenticator app or passkeys.
• Two-factor is required for ledger corrections and billing changes.

• Every table is isolated per organization with Postgres row-level security, enforced even for the table owner.
• The ledger is append-only at the database level.
• Money is stored as exact integers.

{{STAFF_ACCESS_POLICY}}

Prop credentials will be encrypted on your device to a key that's generated inside your own Workspace. FundedFleet will store and relay only encrypted text.

Email {{SECURITY_EMAIL}}.