Security
Freicore separates the company website from authenticated product environments and applies access boundaries where real project data is handled.
freicore.com is generated as a static website. It does not require a public application database or a server-side content system to present the company and its products.
Production access to Bearing and Root is protected by Cloudflare Access. Freicore creates client companies directly and access is deny-by-default rather than anonymous self-service signup.
Bearing stores production project data per client company. Server-side checks enforce tenant boundaries and protect write operations.
Bearing supports JSON export and import so project teams can maintain a controlled, portable backup alongside cloud persistence.
Freicore aims to collect only the information required to provide the relevant site, project, or product service and does not use advertising trackers on this website.
Where project data lives
The two products handle project data in fundamentally different ways, and the difference is architectural rather than a matter of policy.
Bearing stores production project data per client company behind Cloudflare Access, with server-side checks enforcing tenant boundaries. Data stays portable: JSON export and import let a project team keep a controlled backup alongside cloud persistence.
Root has no server. The engine is delivered to the browser and runs there; the workbook is opened by the user from their own machine and is never uploaded. After the first load it works without a network. What Root works out about a sheet lives in that browser's own storage, not in an account of ours.
Responsible reporting
If you believe you have found a security vulnerability in a Freicore website or application, please report it privately and avoid including unnecessary personal or project data.
