Security

Authorization is enforced in the database.

Supabase Auth identifies users. PostgreSQL row-level security checks business membership and centralized roles. Transactional database functions protect stock changes, weighted costs and audit entries from partial writes.

The public client uses a publishable key. Service-role and AI provider secrets belong only in server environments. BizzPro does not claim a compliance certification that has not been independently verified.

Production launch still requires linked-environment migration tests, database advisor review, backup restoration testing, monitoring, secure email delivery and incident procedures.