Row-level isolation
Every financial table enforces row-level security. A record is reachable only by the account that owns it.
Security
Invisible until
someone knocks.
Browsing Nyerix requires nothing. Entering the application requires everything: a verified session, an authorized role, and a server-side decision on every single request.
Role-based authorization
Roles live in a dedicated table and are evaluated server-side. Client state can never grant access.
Protected application routes
The Command Center, Twin, AI, accounts, settings, and founder tooling all sit behind authentication and role checks.
Least-privilege database
Anonymous privileges are revoked on private tables, and elevated helper functions live in a non-exposed schema.
Audit logging
Sign-ins, denials, and sensitive actions are appended to an immutable security event trail — identity and outcome only, never amounts or secrets.
Founder Mode
While acceptance testing runs, only Founder-approved accounts may enter. Everyone else is offered the waitlist.