Data Security
Your data security is our top priority. Here's how we protect your information.
Encryption
All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption provided by our database infrastructure (Supabase/PostgreSQL).
Multi-Tenant Isolation
Every database query is scoped to your organization using PostgreSQL Row Level Security (RLS). This means your data is isolated at the database level — even if there were an application bug, the database would prevent cross-organization access.
Audit Logging
All significant actions are recorded in an immutable audit log. Administrators can review who accessed what data and when, ensuring full accountability.
Infrastructure
Our platform is hosted on trusted cloud infrastructure with automated backups, monitoring, and incident response. Authentication is handled by Supabase Auth with support for Google OAuth and email/password.