Security
How your workspace is protected.
Last updated: August 2026
Workspace isolation
Every record is tied to your account and protected by row-level security in the database, so one account can never read another account's data.
Encryption
Traffic is encrypted in transit with TLS, and data is encrypted at rest by our infrastructure provider.
Authentication
Sign-in uses secure password hashing or Google OAuth. Sessions are short-lived and refreshed automatically.
Payments
We never see or store card numbers. Stripe handles all payment data and is PCI-DSS Level 1 certified.
Backups
The database is backed up continuously with point-in-time recovery.
Reporting an issue
Found something concerning? Use the contact page and we will respond quickly.