Security
Controlled data for controlled programs.
Security is built into the database so that access rules hold even if a screen has a bug.
Multi-factor sign-in
Every user enrolls an authenticator app. Until the second factor is verified, the database returns no rows at all.
Invitation only
There is no public sign-up. Invitations are single-use, expire after seven days, and only work for the invited email.
Row-level access
Every table is protected by rules tied to your department and role. Departments can never see each other.
Encryption
Data is encrypted in transit and at rest. Notes, comments and feedback are also encrypted with a key unique to your department, held in a secrets vault.
Tamper-evident audit
Every significant action is written to an append-only log. Each entry is chained to the previous one with SHA-256, so alterations are detectable.
Limited platform access
Our team manages accounts, not your data. Support can see setup only, only after you grant access, for up to 72 hours.
Hosting and practices
- Database and authentication hosted on Supabase (PostgreSQL) in the United States.
- Website served by Cloudflare with HTTPS enforced, strict content security policy, and no third-party scripts or trackers.
- Passwords are at least 12 characters, and accounts are created only from a valid invitation.
- Automated tests check the access rules on every database change.
Report a security issue
If you believe you have found a vulnerability, please contact us through the Learn more form with the subject "Security". Please do not access data that is not yours.