Your revenue data. Sealed in your name.
Export every purchase, subscription, and event on any plan — normalized, portable, and never sold or shared. Ownership you can hand an auditor.
Your customers, your data, your control
Full export on every plan — no gate, no upsell
Purchase and subscription records are yours from the first event. Pull them all — free tier included — as normalized CSV and JSONL. No third party ever gets a copy.
Any plan, full export
One click pulls every record, free tier included.
Normalized & versioned
Stable schema you can diff and replay.
No lock-in
Leave with everything; nothing is held hostage.
Portable formats
CSV + JSONL that load anywhere.
Data residency
Pin where your revenue data lives
Choose the region your records are stored and processed in, and keep them there. One default today (eu-central), region routing on Enterprise.
Ask sales which regions are live for your plan — we name only what we run.
Isolation
Row-level isolation, enforced in the database
Every tenant's rows are fenced off with Postgres row-level security. A query can only ever see its own revenue data — cross-tenant reads return zero rows, by policy, not by hope.
Compliance posture
Ownership your auditors can walk
Portability, built in
Answer a GDPR portability request with one export, any plan.
Auditable by design
A complete, replayable event history your auditors can walk.
Yours to leave with
No egress fee, no lock-in — take your data and go, anytime.
Guarantees
Strict by default
Own your data, satisfy your auditors
Paywalls, validation, and analytics — with residency, a full audit trail, and one-click export on every purchase record you keep.