Personal Identifiable Information, PII

• We do not ask users for unnecessary personal information
• We do not store any PII

Data storage

User authentication

We use Supabase Auth for authentication, which leverages the Postgres' built-in Auth functionality. Supabase is a SOC2 type 2 compliant.

Authorization

We enforce the PostgresSQL’s Row Level Security (RLS) which controls access to data in a database by row, so that users are only able to access the data they are authorized for

We support encrypted at REST with AES-256 and in transit via TLS.

Sensitive information like access tokens and keys are encrypted at the application level before they are stored in the database.

Internal data handling

who has access to customer data

SOC2 compliance