Security

Security is built in, not bolted on.

CombatFlow enforces secure authentication, role-based access control, strict multi-tenant data isolation, server-side validation and audit logging across critical actions. We never store raw payment card data; billing is handled by a dedicated payment processor.

• RBAC with 7 roles
• Tenant isolation at DB & API
• Audit logs on critical actions
• Server-side validation
• No raw card data stored