Security by boundary
Inventory truth and billing stay separated
KnownStock resolves the workspace from the authenticated session and never trusts a tenant supplied by the browser.
21-day free trial. No credit card required.
Identity and authorization
Revocable secure cookies, CSRF and same-origin checks protect authenticated changes. The Owner alone manages billing; Administrators manage members; Users remain within configured warehouse scopes.
Tenant and inventory isolation
Commercial identity and subscriptions stay in the control database. Each workspace has a separate tenant database, while real foreign keys and parameterized queries protect relationships.
Signed billing state
Paddle API keys and webhook secrets remain server-side. Raw signed webhook bodies are verified, durably stored, deduplicated and applied in occurrence order against a closed product and price allowlist.