All data is encrypted in transit using TLS 1.2+ and at rest using AES-256. Database backups are encrypted with the same standard.
We are working toward SOC 2 compliance and follow security best practices aligned with industry standards. We do not yet hold formal certification.
Tenant data is isolated at the database layer using row-level security, and every sensitive action is recorded in an audit log with the acting user and outcome.
If you've found a security issue, please report it responsibly to [email protected]