Security and Data Protection
Lebnara was founded by an information security specialist with more than 15 years of experience, so protection was built into the software from the start. This page explains exactly what we do to protect your data.
Full isolation per company
Each company has its own login link, and its data is isolated at the database level with Row Level Security rules. One company can never see another company's data.
Login protection
- Two-step verification (2FA) for the owner account through a standard authenticator app.
- A record of every sign-in: date, device and approximate location.
- An instant email alert when someone signs in from a new device or location.
- All traffic to the site is encrypted over HTTPS with HSTS.
Permissions
- Four roles: owner, admin, employee, and an external accountant with read-only access.
- Restrict any employee to a single module, such as cashier only.
- An activity log showing who added, edited or deleted something, and when.
Backup and recovery
- A full weekly backup is emailed to you automatically.
- Download a complete copy of your data in JSON format at any time.
- Soft delete: anything deleted by mistake can be restored from the recycle bin.
- Audit logs older than one year are archived, and a copy is sent to you before they are removed from the active database.
Where is the data stored?
The database is hosted by Supabase (PostgreSQL) in a data centre in Singapore, and the site is hosted on Vercel. Your data belongs to you, and we use it only to run the service for you.
Frequently asked questions
- Can the Lebnara team see my data?
- Administrative access is limited to technical support when it is needed to solve a problem you ask us about, and your data remains yours.
- What happens to my data if I cancel?
- You can download a complete copy before cancelling, and we send you a backup on request.
Try Lebnara now, no sign-up
A full demo company with every module, opens instantly.