Security

Built so your data can’t leak, vanish or change without a trace.

Tagvion holds manufacturers’ customers, assets and service history. We designed the platform around four rules, enforced by the database rather than by the screen.

1. Every company is isolated by the database

Every record belongs to one company. Row-level security in the database and storage policies decide what each person can read, so one company can never see another’s data. Automated tests prove this on every release.

2. Every write is checked on the server

The app cannot write to tables directly. Every change goes through a server function that checks your membership and role, validates the business rule and returns a clear error. Hiding a button is never the only protection.

3. Everything is audited

Every business table records who changed what, when, and the value before and after. The audit log is append-only. Changes to the database structure are recorded too.

4. Nothing is ever deleted

Removing a record archives it; the data is kept. Schema changes only ever add, never drop. Even closing a company account deactivates it and keeps the data.

Audit trail

Who, when, before, after. For every change.

Answer “who changed this warranty?” in seconds. The trail is written by the database itself, so no screen or integration can skip it.

Data handling

Practical protections, on by default.

Passwordless sign-in

Everyone signs in with a one-time code sent by email, with rate limits on code requests.

Safe public scan pages

The scan page shows the unit, its warranty and your service contact. Your customers’ contact details are never public, and archived units stop resolving.

Roles that mean something

Company admins and users get exactly the access their role allows, checked on the server for every action.

Your keys, your integrations

Optional integrations like WhatsApp use your own provider account, entered by you in Setup and off until you switch them on.

Encrypted in transit and at rest

All traffic uses HTTPS. Data and files are stored encrypted by our managed database and storage provider.

Tested before every release

Changes go through automated tests and a staging environment before production. Backups are verified before any production change.

Questions

Security FAQ

Can another company on Tagvion see our data?

No. Isolation is enforced by row-level security in the database and by storage policies, not by the app’s screens. Automated tests that try to read across companies run on every release.

Can Tagvion staff see our data?

Platform administrators see your company profile and usage. We’re building customer-controlled support access, where your admin grants time-limited, logged access when you need help.

What happens if someone deletes a record by mistake?

Nothing is lost. “Delete” archives the record and the audit log keeps the full history, so it can be restored.

What happens to our data if we leave?

Your account is deactivated and your data is kept. Talk to us about an export.

Do old printed QR labels keep working?

Yes. Each unit keeps its scan code for life, so labels already on your products keep working.