Security and multitenancy

Company boundaries are part of every workflow.

Learn how WYN Workforce uses tenant-scoped application access, role permissions, secure headers and controlled APIs to protect company workspaces.

Start with five staff freeExplore the platform

Tenant-scoped application access

Marketing, workforce and billing queries apply the authenticated company identifier rather than accepting tenant identity from browser input.

  • Company scope derived from the authenticated profile
  • Tenant predicates on sensitive reads and writes
  • Composite tenant relationships for critical marketing records

Roles and feature permissions

A person must be both authenticated and authorised for the requested product area and operation.

  • Owner, manager, staff, accountant and platform administration roles
  • Feature access configurable by company owners
  • Separate controls for sensitive marketing and payroll actions

Controlled data paths

Tenant data is served through authenticated Next.js APIs. Direct browser database privileges are revoked for protected application tables.

  • Protected server-side API gateway
  • Validation before mutations
  • Activity records for important administrative and workflow changes

Browser and indexing protection

Security headers reduce common browser risks, while private pages and APIs are kept out of public search results and shared caches.

  • Content Security Policy and frame protection
  • HTTPS transport security headers
  • No-store responses and noindex metadata for private pages

A connected workflow

Move from scattered updates to a clear operating rhythm.

01

Authenticate

Establish the signed-in user and their active company profile.

02

Authorise

Check role, feature permission and record ownership where applicable.

03

Scope

Execute reads and writes with tenant constraints and validated relationships.

Common questions

Can one company access another company’s records?

Application queries scope tenant data to the authenticated company, and critical relationships add database-level tenant constraints.

Are dashboard pages indexed by search engines?

No. Private and authentication pages inherit noindex controls and are excluded from the public sitemap.

Can every staff member access payroll or marketing?

No. Role rules and owner-managed feature access determine which areas and actions are available.

Does the public website expose customer data?

No. Public pages contain product information only; tenant records are served through authenticated application routes.

Give the team access to the work they need—not the whole system.

Create a company workspace, assign roles and configure feature access for each responsibility.

Create your workspace