Security & Trust
Your data security is our top priority. We implement industry-leading security practices to protect your information.
Security Features
Multiple layers of security to protect your data
- •TLS 1.3 for data in transit
- •AES-256 encryption at rest
- •Encrypted database connections
- •Secure API endpoints
- •Company-scoped data access
- •Automatic data segregation
- •No cross-tenant data access
- •Isolated database queries
- •Three-tier role system (Owner, Manager, Member)
- •Granular list permissions
- •Activity audit trails
- •Session management
- •Email/password authentication
- •Magic link authentication
- •Secure session management
- •Password reset flows
- •Public status page
- •Regular automated backups
- •Disaster recovery plans
- •Monitoring and alerting
- •GDPR-aligned — DPA available
- •Data retention policies
- •Privacy by design
- •Published sub-processor list
Compliance & Data Protection
Only what we can back with a document or a control you can inspect — nothing hedged.
GDPR-aligned — DPA available
Sub-processors published
Encrypted in transit and at rest
Role-based access control
Data Storage
Your data is stored securely in MongoDB databases with encryption at rest. We use industry-standard security practices and regular backups to ensure data availability.
Data Access
Only authorized personnel have access to our systems, and all access is logged and monitored. Your data is never shared with third parties except as necessary to provide the service.
Your Rights
You have the right to access, correct, delete, or export your data at any time. You can also request that we stop processing your data. See our Privacy Policy for more details.