Security

Security you can taste.

Your recipes, production data and compliance records are among your most sensitive assets. We treat them that way.

Encryption in transit & at rest
TLS 1.2+ everywhere. Data encrypted at rest with AES-256.
Role-based access control
Owner, Manager, Brewer, Accountant roles with least-privilege by default.
Immutable audit logs
Every create, update and delete is trailed with actor, timestamp and diff.
Row-level security
Every query scoped to your brewery. No cross-tenant reads, period.
Managed infrastructure
Hosted on hardened cloud infrastructure with daily backups retained 30 days.
Privacy by design
No selling of data. No third-party analytics that touch operational data.

Have a security question or found something? Write to security@brewtally.in.