Per-company isolation
Every query is filtered by company in a single data-access layer. Automated tests check that a company can neither read, change nor guess another company’s data — by ID, document link or file.
Security and privacy
Your clients, documents and figures are isolated, encrypted and inaccessible to other companies — and to Grow Easy.
Encryption at rest
Client details, document lines and amounts, notes, signatures and receipts are encrypted (XChaCha20-Poly1305) with a key per company, itself protected by a master key stored outside the web server.
Protected accounts
Passwords hashed with Argon2id, two-factor authentication (TOTP), rate limiting, secure sessions, sign-out from all devices.
No access for Grow Easy
The Mizane team console only sees account information (company, account holder contact, plan, dates). It has no function to read your business data, and never sees or sets your password.
Tamper-evident log
Every console action on your account is written to a chained log visible in your settings: any alteration would be detected.
Your data belongs to you
Full export at any time, encrypted daily backups, account deletion with a 30-day grace period (law 09-08).
What we cannot promise
As with any online service, the hosting provider and anyone with access to both the server and the master key could technically access the data. Mizane makes such access impossible through the interface and logs any intervention; the master key is kept separately, outside the website.
Try Mizane free for 30 days
No payment method required. At the end of the trial nothing is deleted: you choose to continue, or you export your data.