Tenant isolation
Company-owned records are scoped server-side so one organization cannot access another organization's data.

Security and privacy
Renewal Vista describes the controls currently implemented in the application, without claiming certifications or compliance approvals that have not been verified.
Company-owned records are scoped server-side so one organization cannot access another organization's data.
Admin, Manager, and User roles combine with email verification and optional or required 2FA settings.
Confidential records use the existing authorization and assignment rules across lists, details, documents, reports, reminders, and aggregates.
Documents are not public links. The application streams them through authorized endpoints and can use private Supabase storage.
Important application actions are recorded through the existing audit boundary, with data-integrity and security tests in the repository.
Stripe handles checkout and billing workflows; Renewal Vista keeps billing identifiers server-side and uses verified webhook paths.
Security questions and privacy requests: support@RenewalVista.com