Tenant isolation
Each organization only sees its data — enforced with RLS and server checks, not UI hiding.
Looopin
Security and tenant isolation
Point mutations go through protected server functions and an append-only ledger. Wallet and SMS stay unlabeled as live until certified.
Append-only ledger
Balances change through audited server operations with idempotency keys to block duplicates.
Protected RPCs
Scan and redeem run as SECURITY DEFINER functions after validation — never trusted client math.
Audit trails
Sensitive actions are logged for admins without storing secrets or passwords.
Features listed as live are wired to the running system. Apple/Google Wallet, SMS OTP, SSO, white-label, and AI need external credentials or further shipping and are not claimed as ready.