Security is not a feature we bolted on.
PunchGrid is built multi-tenant from the schema up. Here is exactly how your organization's data stays separate from every other workspace on the platform.
Tenant isolation
Every record belongs to an organization. Every server-side request re-verifies the caller's membership and role in that specific organization before touching data — never relying on the frontend alone.
Authentication
Email/password with Argon2-grade bcrypt hashing, or Google OAuth. Account lockout after repeated failed attempts, rate-limited login and password-reset endpoints, and mandatory email verification.
Session security
Signed, httpOnly session cookies with expiration. Password reset and email verification links are single-use, time-limited tokens.
Role-based access control
Seven roles — from Super Admin to Viewer — enforced server-side on every mutation, including manager-scoped visibility so a manager only ever sees their own reports.
Audit trail
An immutable log of logins, clock events, rate changes, approvals, invitations, role changes and admin impersonation — visible to organization admins and platform super admins.
Impersonation controls
Super admin impersonation requires an explicit action, shows a persistent on-screen banner, can be exited immediately, and is fully recorded in the audit log.