Data isolation
How Kapda Stock keeps every business's data separate — a private workspace per business, request-level checks, role and module permissions, and protections against misuse.
Kapda Stock serves many businesses from one platform. Keeping each business's data private is the first rule of how it is built.
A separate workspace for every business#
When you sign up, the platform creates a dedicated workspace for your business in the database — its own separate set of tables for products, customers, invoices, ledgers, settings and team members. Other businesses have their own workspaces. Your records are never stored alongside another business's rows and merely filtered by a business ID.
Only the information needed to run your subscription — your business profile, plan, payments and support tickets — is held centrally. See Your workspace & data isolation.
Every request is checked#
Each time anyone in your team does something in the app, the server:
- Verifies the session — who the member is and which business they belong to.
- Checks the business is allowed in — active, not suspended, subscription paid or in grace.
- Pins the request to your workspace, so it can only read and write your business's data.
- Applies rate limits to stop abuse.
- Checks the member's role — for example, read-only members cannot change records.
- Checks the member's module access, section by section.
Only then does the request run. An automated test verifies that a session from one business cannot read another business's data.
Inside your business#
- Roles set what each member can do. See Roles.
- Module access narrows it per section, and changes apply within about a minute. See Module access matrix.
- Removing a member ends their sessions immediately.
- Two-factor authentication can be required for the owner or everyone. See Security & two-factor auth.
Protections at the edge#
| Protection | What it does |
|---|---|
| HTTPS with HSTS | All traffic is encrypted in transit; browsers are told to always use HTTPS |
| Security headers | Content Security Policy, clickjacking and MIME-sniffing protections |
| Rate limits | Limits on sign-in attempts, sign-ups, bulk sends and request volume — see Error messages → Rate limits |
| Captcha | On sign-in and sign-up |
| Upload checks | Uploaded images are checked to be real JPEG, PNG or WebP files and size-limited |
| No internal identifiers exposed | Internal workspace identifiers never appear in the interface |
Who at Kapda Stock can see your data#
Platform staff operate the service and support you. Requests involving your data — support, backups you download, account closure — are handled for your business on request. See the Privacy Policy.
Related#
Last updated 15/09/2026