Security and privacy

Controls that help the right people see the right renewal.

Renewal Vista describes the controls currently implemented in the application, without claiming certifications or compliance approvals that have not been verified.

Tenant isolation

Company-owned records are scoped server-side so one organization cannot access another organization's data.

Roles and verification

Admin, Manager, and User roles combine with email verification and optional or required 2FA settings.

Confidential renewals

Confidential records use the existing authorization and assignment rules across lists, details, documents, reports, reminders, and aggregates.

Protected documents

Documents are not public links. The application streams them through authorized endpoints and can use private Supabase storage.

Audit and integrity

Important application actions are recorded through the existing audit boundary, with data-integrity and security tests in the repository.

Billing boundaries

Stripe handles checkout and billing workflows; Renewal Vista keeps billing identifiers server-side and uses verified webhook paths.

Security questions and privacy requests: support@RenewalVista.com