Trust
Security, Access & Safe Sharing
MyTabulon separates internal workspace access from customer-facing links and public pages. That separation protects business records while still allowing payments, invites, and shares.
- Dashboard pages require authentication and company access.
- Team roles and employee viewer restrictions limit sensitive business tools.
- Payment links use long random tokens; invoice numbers are references, not secrets.
- Share payment links, PDFs, receipts, emails, invites, or chat shares with customers instead of dashboard URLs.
- Keep payment, AI, email, calendar, WhatsApp, Telegram, and storage secrets in backend environment variables only.
- Plan-gated APIs verify company access, subscription state, plan tier, and plan caps before mutating records.
- File uploads and operation documents count against plan storage allowance.

