Built around dealership boundaries.

Every user profile belongs to exactly one dealership, and every customer, boat, inspection, Work Order and media file is tied to that dealership. Database row-level security policies use that boundary on every request, so a signed-in user can only ever read and change their own dealership's records.

The desktop portal and the mobile app follow the same rules. The portal is another client of the same database, not a separate system with its own copy of your data.

Dealer Admin, Manager and Technician permissions are checked by the database and server functions, not only by hiding buttons. Technicians see only the Work Orders assigned to them and never see part costs; only a Dealer Admin can manage the team, billing and storage.

Users can't choose their own role or dealership. Deactivated users lose access immediately, and each account can be active on one phone at a time.

Photos and videos are uploaded to private storage organized by dealership and inspection. They are never published as open, permanent links.

When a customer opens the Watch Inspection Videos link from their report, the link is checked and short-lived access is granted to each clip as it plays. Dealer Admins can delete completed inspections, and their media, whenever they choose.

Card and bank details are entered on the payment provider's hosted checkout pages and never touch Marine Apps servers. Plan prices and seat totals are calculated on the server from the plan catalog; the browser can't change the amount charged.

Subscriptions and additional seats are activated only after the payment is verified on the server. Payment credentials are kept in server-side configuration and are never sent to the browser or the mobile app.