Security & controls

Trust is part of the product.

LALLY is designed for real project records, real money, and real client decisions. Its controls favor clear ownership, limited access, and review before consequence.

Workspace separation

Company records are scoped to the company workspace and its active members. Client and trade-partner experiences use narrower access paths intended for their specific project or request.

Review-first operations

Al can explain, summarize, and prepare work, but important changes stay under human control. External communications, client publication, approvals, and financial actions use explicit review steps.

Billing and credentials

Subscription checkout and payment-method handling are provided by Stripe. LALLY keeps service credentials on the server and does not place secret keys in the browser.

Records and recovery

Important workflow events retain durable records, including revisions and provider events where supported. Application releases can be rolled back independently of production records; database recovery is treated as a controlled disaster-recovery process.

Responsible limitations

LALLY is not a bank, accounting ledger, legal advisor, or substitute for professional review. Contractors remain responsible for verifying project, payment, compliance, and client information before relying on it.