Security

Ownership data deserves real security

Credentials with mandatory TOTP MFA, invite-code-gated registration, and server-side authorization on every request. Audited and reversible only by explicit correction.

Build Your Cap Table Free
01

Real authentication

Local credentials with bcrypt-hashed passwords, secure HTTP-only session cookies, and JWT refresh — invite code required to register.

02

Real MFA

TOTP two-factor authentication with step-up re-authentication required for share issuance, transfers, financing execution, and security changes.

03

Tenant isolation

Every request is authorized server-side against your company membership and role — never trusted from the client.

04

Full audit trail

Every equity, financing, document and security event is logged in human-readable form and can be exported.