Security — Principles

Plain English: security controls are part of every account, not a feature of an expensive tier. There is no plan on which your data is protected less. Three ideas shape everything below. • A permission is only real if it holds everywhere. A field you hide must stay hidden when it is pulled through a relation, summed into a report, matched by search, or read by AI. A rule that applies only to the grid is not a rule. • Isolating access should not mean severing data. Products in this category typically isolate by splitting information into separate bases or boards, which breaks every relationship across the split. RowFold isolates access with folders and permissions and leaves the model intact. • Deleting should be recoverable. Records are soft-deleted so an accident is a visit to Trash rather than a support ticket.