Meridian Manage

SECURITY

Security built into every workflow.

Meridian Manage handles tenancy data, owner financials and compliance documents — so security is not an add-on. It's the baseline.

  • Role-based access control

    Every action is gated by the user's role and the org they belong to. Owner, tenant and vendor portals see only what they should — no global admin escape hatch.

  • Encryption everywhere

    TLS 1.3 in transit. AES-256 at rest on managed Postgres and Vercel Blob. Document SHA-256 hashes are recorded at upload time so tampering is detectable.

  • Regional hosting

    Application and database run on Vercel and Neon in EU-aligned regions. No multi-tenant data leaves the platform without an explicit export action.

  • Audit trails

    Every create, update, delete is logged with actor, IP, user-agent and before/after diff. Auditors can replay any record's full timeline.

  • Auth + sessions

    Password hashing via bcrypt. Sessions managed by NextAuth.js with HTTP-only, SameSite=Lax cookies. Optional SSO for enterprise tenants.

  • Backups

    Continuous WAL backups on the primary database with point-in-time recovery to any second in the last 7 days. Daily logical snapshots retained for 30 days.