Tenant isolation
Each organization only sees its data — enforced with RLS and server checks, not UI hiding.
Looopin
Security and tenant isolation
Point mutations go through protected server functions and an append-only ledger. SMS stays unlabeled as live until certified.
Append-only ledger
Balances change through audited server operations with idempotency keys to block duplicates.
Protected RPCs
Scan and redeem run as SECURITY DEFINER functions after validation — never trusted client math.
Audit trails
Sensitive actions are logged for admins without storing secrets or passwords.
Features listed as live are wired to the running system. SMS OTP, SSO, white-label, and AI need external credentials or further shipping and are not claimed as ready.