Most profit tools give everyone the same all-access login. Kompound has four Roles, granted Store by Store, enforced in the app, the service layer and the database — so a client, a bookkeeper or a media buyer sees exactly what they should.
| Person | Role | Stores | Can Change Costs | Can Invite |
|---|---|---|---|---|
| Maya (you)Owner | Owner | All 3 | Yes | Yes |
| JordanHead of Growth | Admin | All 3 | Yes | Yes |
| PriyaMedia buyer | Analyst | Pulse Audio | No | No |
| Client — NorthsideExternal | Viewer | Northside only | No | No |
| BookkeeperExternal | Viewer | Pulse Audio | No | No |
Set once when you invite someone. Changeable any time, logged every time.
| Capability | Owner | Admin | Analyst | Viewer |
|---|---|---|---|---|
| View Reports and Dashboards | ✓ | ✓ | ✓ | ✓ |
| Export data | ✓ | ✓ | ✓ | — |
| Build Dashboards and Custom Metrics | ✓ | ✓ | ✓ | — |
| Enter and change Costs | ✓ | ✓ | — | — |
| Change Accounting Settings | ✓ | ✓ | — | — |
| Connect and disconnect Integrations | ✓ | ✓ | — | — |
| Invite people and set Roles | ✓ | ✓ | — | — |
| Add or remove Stores, manage billing | ✓ | — | — | — |
Security that a client's IT team can read without a call.
Enforced at the database, not just the interface. One account can never read another’s rows, and one Store’s data never leaks into another’s Report.
Every change to a Cost, a filter, a setting or a Role — with who and when. 30 days on Growth, full history on Scale.
Orders, Costs and Ad performance are stored. Customer names, emails, phones and addresses never appear in a Report or an export — identity is a deep link to the Order in your own admin.
United States, encrypted in transit and at rest, with daily backups. An EU region is planned.
SOC 2 Type II is under way. A Data Processing Addendum with Standard Contractual Clauses is available on request.
Ask and it’s removed. Uninstalling the app stops all data collection immediately.
Yes. Invite them as a Viewer on that Store. They see that Store's Reports and nothing else — no other client, no consolidated view.
Not yet. SOC 2 Type II is under way, and we'd rather say that plainly than imply otherwise.
In the United States. A DPA with Standard Contractual Clauses is available, and an EU region is planned.
Reports never show it. Where the platform sends identifying fields, Kompound keeps only what's needed to link an Order and never surfaces it in a Report or export.
Four Roles, per-Store access, an Audit Log, and Reports that never show a Customer's name.