Security

Sign-in is handled by a managed authentication service. Passwords are stored as salted hashes, never in readable form. Google sign-in is available, and password changes require confirming your current password.

All traffic between your browser and TechShinobi is served over HTTPS/TLS.

Every inventory item, invoice, expense, contact, appointment and setting is tied to the account that created it. Access rules are enforced by the database itself, not just hidden in the interface, so one account cannot read or change another account's records even by crafting a direct request.

Row-level access rules are enabled on user data tables and scoped to the signed-in user or their business. Privileged database credentials are used only by trusted server code, never in the browser.

API keys and provider secrets are held as server-side environment secrets. They are never embedded in frontend JavaScript, never returned to the browser, and never shown in the product interface.

Sensitive actions run as server functions that verify who you are before doing any work. Route protection in the interface is a convenience; the real check happens on the server.

Workspace pages require an active session. Public pages such as a shared invoice link show only customer-facing details and never internal cost or profit information.

Data submitted to the server is validated before it is stored, and webhook callbacks from payment providers are signature-verified before they are trusted.

Authentication and paid lookup endpoints are rate limited by the underlying providers to reduce brute-force and abuse attempts.

Card details are collected and stored by a PCI-compliant payment processor. TechShinobi only receives a payment reference and subscription status.

The managed database platform performs automated backups of the production database. You can also export your own data at any time from Settings.

Sign-in and password-change events are recorded on your account so you can review recent activity, and application errors are logged so we can investigate problems.

If you believe you have found a security issue, email support@techshinobi.io with the details. We take reports seriously and will respond as quickly as we can.