Enterprise-grade security.
Your data stays yours.
Built from day one with financial-grade data protection. Multi-tenant isolation at the database level — not the application level.
Security by design, not by patch.
Multi-Tenant Isolation
PostgreSQL Row-Level Security (RLS) enforced on 18+ tables. ISO A's proprietary lender data is cryptographically invisible to ISO B. This isn't application-level filtering that can be bypassed — it's database-level enforcement.
- Every query scoped by organization ID at the Supabase layer
- Even application-level bugs cannot bypass database isolation
- Cryptographic separation between all tenant data
Role-Based Permissions
Three granular permission levels control who sees what across your organization. Brokers never see commission data they shouldn't. Permission checks happen at both the API route level and the database level for defense-in-depth security.
- Owner — billing, team management, full configuration
- Admin — lender settings, pipeline config, reporting
- Rep — deal submission, pipeline access, scoped visibility
Complete Audit Trail
Every action on every deal is timestamped, attributed, and stored in an append-only log. Submissions, lender responses, document uploads, AI scoring events, notes, and calls — all traceable. The audit log cannot be edited or deleted by any user, including organization owners.
GDPR & CCPA Compliance
Full data export on demand. Data deletion requests honored within required CCPA timeframes. Configurable retention policies per organization. Know exactly what data is stored, where it's processed, and how long it's retained. Full deletion available on churn — no data hostage scenarios.
Your competitive edge stays
yours alone.
We share only anonymized market trends across the platform — never your relationships, deals, or strategy.
We share only the averages
Cross-platform insights draw from aggregated approval ranges and industry-wide volume trends. No individual deal, merchant, or organization is ever identifiable.
We never expose your book
Lender contacts, commission structures, submission pipelines, and deal-level outcomes remain sealed to your tenant. Other brokers cannot see or infer them.
We never train on your playbook
Your approval patterns and lender preferences never feed models for other organizations. No cross-tenant scoring, no shared blacklists, no sold insights.
Built on trusted foundations.
Bank statements deserve bank-grade protection.
Merchant bank statements contain the most sensitive business data. YieldStream treats them accordingly.
Your data stays yours.
Your lender list is proprietary. No data resale. No shared blacklists. Full export anytime.
Your lender contacts, submission history, and pipeline are yours — we never reach out to your funders or merchants.
No data resale, no shared blacklists, no monetizing your deal flow behind your back.
Full data export anytime. No lock-in, no hostage negotiations. Your business stays portable.
Incident Response
Security incidents are triaged within 24 hours with affected organizations notified per our incident response policy. Dedicated security contact for enterprise accounts.
Data Retention & Deletion
Configurable retention policies per organization. Full data deletion on request within CCPA-required timeframes. When an org churns, all data can be permanently purged — no residual copies.