Local-first data boundary
Free-workspace sales, purchasing, inventory, accounts, parties, reports, and backups remain on the customer-controlled computer.
Trust through explicit boundaries
Security designed around the service you choose.
The free product minimizes cloud data exposure. Managed services add controlled cloud capabilities only through an explicit agreement and technical entitlement.
Credential protection
Passwords are handled by the authentication API and stored as one-way hashes. Secrets should never be shared through support email.
Entitlement enforcement
Cloud sync, managed backup, mobile access, and custom workspaces require explicit company entitlements.
Least-privilege cloud design
Managed services are designed around scoped identities, private data stores, encrypted transport, controlled backups, and tenant-aware authorization.
Controlled updates
Release integrity, signing, update metadata, and rollback are treated as separate release gates.
Operational visibility
Authentication, service health, failures, and security-relevant events are logged and monitored according to the deployed environment.
Responsible disclosure
If you believe you found a vulnerability, report it privately with affected URLs or versions, reproduction steps, impact, and safe supporting evidence. Do not access customer data, degrade service, or publicly disclose an unremediated issue.
This page describes Karoobar's security approach; it is not a claim of ISO, SOC, PCI, FBR, or another independent certification unless a current certificate is expressly published.