Security

Riera-Studio uses Supabase Auth for user authentication.

Authenticated routes are intended to redirect unauthenticated users to the sign-in page.

Company and workspace data is designed to be isolated so one company cannot access another company’s data.

The database design is RLS-ready and intended to work with row-level security policies.

The app supports owner, admin, manager, employee and viewer roles.

Server-side checks are configured for admin and company actions where sensitive changes are made.

Secrets are not intended to be placed in frontend code.

Environment variables such as service role keys and database URLs should be stored in Vercel and Supabase settings, and diagnostics should only show present or missing status.

For security or support concerns, contact the Riera-Studio team through the published support email.