Every record in ServeDeck carries the workspace it belongs to. Row-level security in the database checks each request against the person signed in, so a request for another workspace's data, or another client's, returns nothing.
Because the rule lives in the database, a mistake in a page cannot show someone data they should not see. Passwords are stored only as hashes, and payment keys a workspace connects are encrypted. More in the Privacy Policy.