Security & Compliance
At MembershipSoft, security is baked into our architecture from the ground up. We utilize cutting-edge cryptographic standards and secure Cloudflare infrastructure to protect your business and member data.
1. Data Isolation & Multi-Tenancy
Each customer's data is logically isolated. Our database layer strictly filters every SQL query by `tenant_id` to prevent cross-tenant data leaks. We audit database operations to ensure complete tenant containment.
2. Encryption Standards
- Data in transit: Encrypted using TLS 1.3 across all public routes.
- Data at rest: Stored on secure Cloudflare D1 encrypted database nodes.
- Field-level encryption: Sensitive data fields (such as user credentials and contact details) are encrypted at the application layer before hitting the database.
3. Compliance & Auditing
Our platform includes built-in SOC 2 audit logging tracking system configurations, RBAC permissions, and authentication events. We also offer HIPAA business associate agreements (BAA) for medical and therapeutic verticals on Pro Scale plans.