Security

Security is built into how ReadyClass is architected.

Payments never touch our servers

All card data is handled directly by Stripe, a PCI-DSS Level 1 provider. ReadyClass uses Stripe Connect, so funds settle in each business's own Stripe account — we never store card numbers or hold balances.

Per-business data isolation

Each business's workspace is isolated. Database security rules enforce that only members of a workspace can read or write its data, and public registration is handled server-side so visitors never get direct database access.

Authentication

Accounts are secured with Firebase Authentication (email/password or Google). Sessions are managed by Firebase and verified server-side for every privileged action.

Reporting an issue

Found a vulnerability? Please email admin@bwstack.dev — we read every report.