01Workspace isolation
Every customer, project, estimate, invoice and schedule record is scoped to your account at the database layer with row-level security policies. Requests are evaluated against your authenticated identity, so one workspace cannot read or write another workspace's data — including through the AI Command Center.