Security

Tenant isolation is the default, not an add-on.

Opus Pro is multi-tenant by design. Every company is sealed off from every other, enforced at the database, not just in the app.

Isolation by design

Every company is sealed off at the database, not just the app.

Opus Pro runs every query through Postgres row-level security scoped to the requesting tenant. A request physically cannot reach another company data, even if application code tried.

NHNorthstar HVACtenant request
SGSentinel Guardingtenant request
UFUnity FMtenant request
Row-level security gate

One database

Each row scoped to exactly one tenant

Row-level isolation

Postgres row-level security scopes every query to its tenant. A request can only ever see its own data.

Encrypted at rest

Sensitive fields are encrypted with AES-256-GCM. Credentials use modern argon2id hashing.

Hosted in-region

Run on managed infrastructure with data kept in your region for UK, EU, and GCC customers.

Roles & permissions

Module-level roles control who sees and changes what, with custom roles for larger teams.

Audited & backed up

Every sensitive action is written to an audit log, with automated backups and recovery.

Your own domain

Each company runs on its own subdomain or custom domain, with managed TLS certificates.

Put your whole operation on one platform.

Start a free 14-day trial today. No card, no commitment, live before the day is out.