Security
Protection built into daily work.
StockSlab protects local records, account credentials, and data sent between the app and cloud sync services.
Local data
StockSlab stores desktop data in an encrypted local SQLCipher database. The app reads from this local database, so work continues while offline.
Account credentials
Sign-in tokens are stored in the operating system credential store, not plain files. Passwords are hashed with Argon2id on the server and are never stored on the device.
Data in transit
StockSlab uses TLS for data sent between the app and sync services. Sync runs in the background after important changes and at regular intervals while the app is in use.
Access control
Role-based permissions use resource and action rules. An audit log records changes. Business owners control account and branch access.
For a security report, email team.cuboidinc@gmail.com.