Your business. Your data.
Quotes, clients and money records are the business. Here is how InFieldX treats them.
Isolated per organisation
Every record belongs to your organisation, and isolation is enforced inside the database itself (row-level security on every table) — not just in application code.
Who sees the money is a role
Invoices, estimates, rates and budgets are visible to owners and managers only. That split is enforced by row-level security in the database — not by hiding menu items in the interface.
Passwordless sign-in
There is no password to phish, leak or reuse. Each sign-in uses a short-lived six-digit code or magic link emailed to you, and nothing else gets you in.
Encrypted in transit
All traffic runs over HTTPS with strict transport security. Sign-in is protected against bots and brute force with Cloudflare Turnstile and rate limiting.
Every change audited
Creates, edits and deletes on business records are captured in an immutable audit log — who did what, and when.
Deletes are recoverable
Deleting a client, job card or invoice marks it deleted rather than destroying it, so honest mistakes are reversible.
Writes go through one door
Every mutation passes through server-side procedures that re-check your organisation and role — the browser never writes to tables directly.
Proven infrastructure
InFieldX runs on Supabase (PostgreSQL) and Vercel — managed, patched platforms with encryption at rest.
POPIA and your clients' information
InFieldX is built in South Africa with POPIA in mind. The personal information you store — client names, contact details, addresses — belongs to your organisation, is used only to run your account, and is never sold or shared. If you leave, ask us at hello@infieldx.co and we will export or permanently delete your organisation's data.
Found something that worries you? Report it to the same address — security mail gets read first.