Tenant boundary
Workspace-scoped by design
Every workspace read and mutation is checked against active membership. Cross-workspace access is rejected at the application boundary.
Document decisions, with accountable evidence
MergePoint gives teams secure workspaces, explicit roles, controlled invitations, retention policy and a durable audit trail before document collaboration expands.
Tenant boundary
Every workspace read and mutation is checked against active membership. Cross-workspace access is rejected at the application boundary.
Governance
Owners set active, archive and deletion-grace periods. Legal holds require a reason and preserve who changed the policy.
Commercial evidence
Hosted Paystack checkout fixes the plan and amount server-side. Entitlements follow exact provider verification and retained transaction evidence.
Start with governance