All data is encrypted in transit and at rest using industry-standard TLS and AES-256 encryption.
We are fully compliant with the General Data Protection Regulation and process data lawfully.
All customer data is stored and processed within the European Union on Supabase infrastructure.
Row Level Security on every table ensures companies can only access their own data.
Automated daily backups and point-in-time recovery ensure your data is never lost.
You have full control over your data and can request deletion at any time.
Our infrastructure and practices meet industry standards
How we implement security at the infrastructure level
Every database table has Row Level Security policies enforced, ensuring tenant isolation at the database level. Companies can never access another company's data.
All network traffic is encrypted using TLS 1.3. This includes API requests, database connections, and webhook deliveries.
Privileged database operations use SECURITY DEFINER functions with strict input validation, preventing privilege escalation and SQL injection.
All outgoing webhooks are signed with HMAC-SHA256 signatures, allowing recipients to verify authenticity and prevent tampering.