Tenant isolation
Each organization only sees its data — enforced with RLS and server checks, not UI hiding.
Looopin
Point mutations go through protected server functions and an append-only ledger. Wallet and SMS stay unlabeled as live until certified.
Each organization only sees its data — enforced with RLS and server checks, not UI hiding.
Balances change through audited server operations with idempotency keys to block duplicates.
Scan and redeem run as SECURITY DEFINER functions after validation — never trusted client math.
Sensitive actions are logged for admins without storing secrets or passwords.
Canlı özellikler çalışan sisteme bağlıdır. Wallet, SMS OTP, SSO, white-label ve AI harici kurulum gerektirir ve hazır sayılmaz.