Security.
How Noliser protects your business, your customers and their payments.
- 01
Payments by Stripe.
Card details are entered in Stripe's own forms and never reach Noliser's servers. Stripe is certified PCI DSS Level 1. Payments are direct charges on your own Stripe account; Noliser receives only its fee.
- 02
Data stored in the EU.
Noliser's database and files are hosted by Supabase in Frankfurt, Germany (AWS eu-central-1). The app is served by Vercel.
- 03
Row-level security on every table.
Every table in the database has row-level security. A signed-in member reads only their own business's data, and money, status and billing change only through checked database functions.
- 04
Access inside your team.
Owner, Manager and Staff roles, with switches for what each person can do. Every change to a booking is logged with who made it.
- 05
Noliser staff access.
Noliser's admin tools show customer details masked. Revealing them needs a reason, and every view is written to an audit log.
- 06
Sign-in.
Google or email with a password, with codes by email for new accounts and password resets. Bot checks by Cloudflare Turnstile and rate limits protect every sign-in form.
- 07
GDPR.
You control your customers' data and can export or delete it on request. A deleted business is purged after 30 days; payment records are kept as the law requires.
- 08
Report a vulnerability.
Email hello@noliser.com with the details. Please give us time to fix the issue before sharing it.