Built so a closer’s file stays in that closer’s org.

ParcelClear is a Next.js app on Vercel with Supabase Postgres and row-level security. The service role never ships to the browser. Personal information is not written to console logs or Sentry breadcrumbs.

Tenant isolation

File, party, screen, and evidence rows carry organization_id. Policies check membership. Leads and rate-limit rows have no client policies; only the server service role inserts them.

Secrets

Publishable keys are for the browser. The service role, Stripe secret, and Resend key stay on the server.

Evidence

Paid evidence packs are stored in a private bucket and hashed. Audit logs are append-only.

Telemetry

Sentry is wired for server and client. Event metadata uses event types, ids, and counts — not names, emails, or addresses. PostHog is optional and off unless you set a key.

Auth

Accounted product surfaces use Supabase SSR cookies. The free tools do not create an account.