Security

Company data must stay separated and controlled.

Orgaknow is built around private company workspaces, admin access, read-only staff views, and controlled field visibility.

Workspace separation

  • Every company workspace needs its own company identifier.
  • Admins should only access companies registered to their email.
  • Production Supabase tables must use Row Level Security before launch.

Employee data

  • Staff links should be read-only.
  • Companies control which employee fields are visible.
  • Photos and private fields should be stored and served with appropriate access controls.