Security

Your workshop's data stays your workshop's

Organization isolation

Every record carries its organization and the database rejects reads and writes outside your active membership. Your membership is re-checked on every request.

Role separation

Client details, private notes, order values and payments live in owner-only records. Workshop users never receive them — not in screens, exports, live updates or notifications.

Private files

Files are stored privately and opened through links that expire after five minutes. Deleted files are purged after 30 days.

Sign-in protection

Email verification for new accounts, optional two-step sign-in for owners, and instant access removal for disabled members.

Audit history

Order changes are recorded with who and when. Platform administration actions are logged with a reason.

Payments

Subscription checkout uses the payment provider's hosted pages. KaratRelay never collects or stores card numbers.

KaratRelay does not currently hold third-party security certifications and does not offer an uptime guarantee.