Security & your data

Row-level tenant isolation

Karatry is multi-tenant, and every query is scoped to your workspace and enforced at the data layer — not just hidden in the UI. Your books are never visible to another business.

MFA & role-based access

Turn on multi-factor authentication, and give each teammate exactly the permissions their role needs — no more. Invitations are emailed, access is revocable.

Full audit trail

Every change is recorded — who did what, and the before & after. When money or inventory moves, there's a record you can point to.

Encrypted, on trusted infrastructure

Your data is encrypted in transit (TLS) and at rest, hosted on infrastructure operated by providers that maintain SOC 2 Type II certification (our cloud host and managed database).

Your data is portable

One-click CSV export of customers, inventory, styles, BOMs, and memo & manufacturing history — anytime. Open format, no exit fees. You can always take your business elsewhere.

AI with a human in the loop

The assistant is permission-checked and reads only your own workspace. Anything that moves money or leaves the building is prepared for a person to approve — and logged in the audit trail.

On the roadmap: Karatry does not yet hold its own SOC 2 report — we're an early-access product and we won't claim a certification we don't have. Our underlying cloud host and database provider maintain SOC 2 Type II, and a Karatry SOC 2 audit is planned as we grow. Have a specific security or compliance question? Email hello [at] karatry [dot] com — we'll answer honestly.