Trust, access, and documents
Security & Data Protection
PearlCount is built to help yacht teams organize sensitive finance records with secure sign-in, vessel-based access, role-aware permissions, private document storage, encrypted connections, and reviewable AI assistance.
Secure sign-in
PearlCount uses Supabase Auth for email-and-password sign-in and Google sign-in. Email verification is used for sensitive flows such as platform-admin access and invite acceptance.
Vessel-based workspaces
Financial records are scoped around each vessel, helping separate vessel expenses, charter expenses, receipts, budgets, APA records, approvals, and reports.
Role-based permissions
PearlCount supports different access levels for owners, captains, managers, accountants, approvers, crew, and viewers. Each role is designed to see and manage the information relevant to its responsibilities.
Private receipt and document storage
Receipts, invoices, proofs of payment, and supporting documents are stored in private cloud storage and connected to the expense or report they belong to.
Time-limited document access
Receipt and document files are accessed through authorized, time-limited signed links rather than permanent public URLs.
Encryption in transit and at rest
PearlCount uses HTTPS/TLS to protect data in transit. Data is stored on Supabase, where database and storage infrastructure provide platform-level encryption at rest.
Reviewable AI assistance
PearlCount can use AI to read receipts and suggest expense details, but suggestions are shown for review before finance records are finalized.
Logging and sensitive values
PearlCount is designed so sensitive values such as passwords and access tokens are not written to application logs.
Security program status
PearlCount is currently in early access. This page describes the protections currently used for yacht finance workflows and will be updated as the security program matures.