Protect WhatMatters Most
Honest, sensible security built into every part of the platform. Strong logins, encrypted secrets, fine-grained permissions, and a complete audit trail — no buzzwords required.
What You Actually Get
Practical, working security features baked into every install — not checkbox marketing.
Two-Step Login
Authenticator-app codes (Google Authenticator, 1Password, Authy) plus one-time backup codes for every account.
Account Verification
Confirm new accounts by email — or by text message — before they can place orders or change sensitive settings.
Fine-Grained Permissions
Decide exactly who sees what. The receptionist, the bookkeeper, the manager, and the owner each see only what they should.
Full Audit Trail
Every change tracked with the person and the timestamp. No more "who deleted that?" — the answer is right there.
Encrypted Secrets
Passwords stored one-way (not even your admins can read them). API keys, server passwords, and other credentials encrypted in the database.
Cards Never Touch Your Servers
Credit card numbers are handled entirely by Stripe — they never reach your systems, which keeps your compliance scope tiny.
How BRAD Handles Your Data
No jargon, no buzzwords — here's the truth about how your data is protected.
Encrypted in Transit
TLS between every browser and your servers
Passwords One-Way
Stored using scrypt — not even your admins can read them
Card Numbers
Handled by Stripe — never stored on your install
Signed Updates
Software updates are tamper-proof on delivery
Export the Audit Trail
Need a record for compliance or an internal review? Export the full audit log any time, in CSV or JSON.
Per-Person Access
Add staff, assign a role, choose exactly which screens and actions they can use. Revoke access in one click.
Session Hygiene
Logins use tamper-proof browser cookies and time out automatically. Revoke a session remotely if a device is lost.
Questions About Your Setup?
Whether you're handling customer payments, sensitive appraisal data, or your own team's schedules, we're happy to walk through exactly how it's protected.