🔒
SECURITY ARCHITECTURE

Security

Tenant isolation, role-based permissions, prepared statements, CSRF protection and audit logging; security is part of the architecture, not an afterthought.

Tenant isolationRole-based permissionsCSRF protectionAudit loggingPrepared statements

Yacht businesses hold not only commercial data but guest identity data as well. That is why security in Yachtio is an architectural choice rather than a feature list.

Access to data is constrained at every layer: company identity at the query level, role and module permissions at the application level, and visibility control at the interface level.

LAYERS

How security is applied

01
⌘

Tenant isolation

Every query is scoped by company identity; there is no path to another company’s data.

02
♙

Role and module permissions

A user sees only the module and action they are authorised for.

03
🔒

Prepared statements

All database access uses parameterised queries.

04
✓

CSRF protection

Every state-changing request is validated with a session token.

05
▥

Audit logging

In sensitive modules, every view and change is logged.

06
▧

Sensitive data separation

Modules holding identity data sit in their own permission scope.

Turn your yachting business into a connected ecosystem.

In a 30-minute live demo, let’s look together at how Yachtio would work in your business.