Workspace Isolation
HavenOne is designed around business workspaces. Tenant-owned records use business identifiers and access policies so each business should only access its own data.
Authentication and Roles
Users authenticate through Supabase Auth. HavenOne supports owner, staff, driver, and customer roles, with plan-aware access controls for selected features.
Payments
Subscription billing and payment-related flows use Stripe. Sensitive card data is handled by Stripe rather than stored directly in HavenOne.
Operational Controls
Production launch should include environment variable reviews, backups, logging, monitoring, and a full tenant-safety verification pass before accepting real customers.
Reporting Issues
Security concerns can be reported to hello@havenone.com.au. Include enough detail for the team to investigate without sharing unnecessary sensitive data.