Skip to content
KashrusBase
עברית

Security & Trust

Your agency's records, protected and kept separate

Kashrus records are sensitive: establishments, staff, payments and decisions. Here is how KashrusBase protects them — stated plainly, and only what the platform actually does.

Data isolation

Each agency sealed off from every other

Agencies share the platform, never their records. The separation is enforced in the database itself, on every table that holds agency data — not just in the screens.

  • Every agency record carries its organization, checked by the database on every read and write
  • Links between records cannot point into another agency
  • Each agency reaches the platform through its own domain
  • Automated tests try to read and change records across agencies — and must fail

Role-based access

Everyone sees only what their role requires

People sign in to an interface made for their role — office, mashgichim, shochtim, team leaders, supervisors, establishments — and administrators are given access one area at a time.

  • Separate interfaces by role
  • Administrative areas opened per person by the super-admin
  • Suspending someone ends their active sessions
  • Passwords of at least 12 characters, and sign-out after inactivity

Illustrative preview · fictional data

Audit trail

A record of who did what, and when

Changes across the platform are recorded automatically, at the database level — what changed, who changed it and when — along with sign-ins and exports.

  • Establishments, certificates, reports, invoices, payments, people and permissions
  • A searchable activity log with filters
  • History on each establishment, invoice, report, person and facility
  • Secret values left out of the log

Illustrative preview · fictional data

Data ownership & export

Your data belongs to your agency

Your records are yours. Key records export from the platform today, and when you need everything, we prepare a complete export of your agency's data for you.

  • Certificates as PDFs, one at a time or in bulk
  • Invoices, statements and receipts as PDFs
  • The activity log as a CSV file
  • A complete export of your agency's data, prepared on request

Safe testing

A sandbox that never reaches the outside world

Training and testing happen in sandbox organizations. Email, charges, bank requests and accounting updates are blocked at the lowest level of the code, so practice can't reach a real establishment or bank account.

  • Outgoing email held back or redirected
  • No charges, bank or accounting calls
  • The same screens, without consequences

Infrastructure

Established cloud infrastructure

KashrusBase runs on a managed PostgreSQL database from Supabase and on Vercel's hosting platform. Connections are encrypted in transit, and sensitive documents are stored privately and opened through short-lived links.

  • Managed PostgreSQL database
  • Encrypted connections (HTTPS)
  • Staff documents, certificates and financial files in private storage

What we don't claim

KashrusBase doesn't currently hold formal certifications such as SOC 2 or ISO 27001, and we don't publish uptime guarantees. If your agency has a security questionnaire or specific requirements, send them to us — we'll answer in writing.

Ask a security question

Questions agencies ask

Can another agency on the platform see our data?

No. Each agency's records are separated in the database itself, and every read and write is checked against the agency it belongs to. We test the separation with automated checks that try to cross it.

Do mashgichim see financial information?

No. Each person signs in to an interface for their role. Staff see their own schedule, reports and pay; financial areas open only to the administrators you choose.

Can we take our data with us?

Yes. Certificates, invoices, statements and the activity log export from the platform, and we prepare a complete export of your agency's data on request.

Is every action recorded?

Changes to records across the platform are recorded automatically with who made them and when, along with sign-ins and exports. The super-admin can search the log and export it.

See how KashrusBase can work for your agency.

Tell us about your agency, and we'll walk you through the platform with your own operation in mind.

Request a demoHow pricing works