Data Security
Your venue's data,
walled off by design.
Schedules, tips, and payroll prep are sensitive. Here is exactly how Backhouse protects them today - stated plainly, with nothing we haven't actually built.
Every venue's data is isolated in the database
Backhouse is multi-tenant with row-level isolation: every record belongs to a venue, and Postgres Row-Level Security policies enforce that separation inside the database itself - not just in application code. A request from one venue physically cannot read another venue's rows.
Your card data never touches our servers
All payments run through Stripe-hosted checkout. Card numbers are entered on Stripe's PCI-compliant pages and stored by Stripe - Backhouse never sees, transmits, or stores card data. We hold only the subscription state Stripe reports back.
Encrypted in transit
All traffic between your team's devices and Backhouse - and between Backhouse and its database - travels over TLS-encrypted connections. There is no unencrypted path to your data.
Least-privilege, role-based access
Owners, managers, and staff each see only what their role allows, and those permissions are enforced on the server - not just hidden in the interface. A staff account can't read payroll prep; a manager can't touch another venue.
Per-venue separation, even within a group
Multi-location groups share one dashboard, but each location's records stay scoped to that location. Access across locations follows the roles you grant - nothing is pooled by default.
Your data is yours
We don't sell your data, and your operational records - schedules, tips, checklists, logs - exist to run your venue, not to be mined. Payroll data exports to CSV whenever you want it out.
Straight talk
We'd rather under-claim than over-claim. Backhouse doesn't yet hold formal certifications like SOC 2, and we don't list security features here before they ship. What's on this page is what runs in production today; as we harden more of the platform, this page grows with it.
Found a vulnerability, or have a security question before bringing your venues on? Email security@runbackhouse.com - reports go straight to the team that ships fixes.
Run the day, keep it private.
90-day free trial. No credit card, unlimited staff, your data isolated from day one.