Security

Your data protected by AES-256-GCM encryption with Supabase Vault, Row-Level Security, and SOC 2 Type I controls (audit in progress)

SOC 2 Type I

Audit in progress — Target Q2 2026

SOC 2 Type II

Audit planned — Target Q3 2026

ISO 27001

Controls Implemented

GDPR

Compliant — US-hosted (AWS Oregon). EU region available on request.

Security Controls

Security by the Numbers

Measurable security controls we can demonstrate on request

100%

User data tables with Row-Level Security

All user data protected at database level

Dual-Layer

AES-256-GCM + Vault encryption

Defense in depth for all tokens

MFA Enforced

For all admin access

Multi-factor authentication required

Tamper-Proof

Audit log integrity

SHA-256 hash-chain verification

Defense in Depth

Comprehensive security controls across every layer of our platform

Trusted Partners

All subprocessors maintain independent security certifications

Vendor	Purpose	Compliance	DPA
Clerk	Authentication	SOC 2 Type II	View
Supabase	Database & Storage	SOC 2 Type II	View
AWS	Hosting & Storage	SOC 2 Type II	View
OpenAI	AI Processing	SOC 2 Type II	View
Anthropic	AI Processing	SOC 2 Type II	View
AssemblyAI	Transcription	SOC 2 Type II	View
Stripe	Payment Processing	PCI DSS Level 1	View
Google	Gmail & Calendar	SOC 2 Type II	View
Microsoft	Teams Integration	SOC 2 Type II	View
Atlassian	JIRA Integration	SOC 2 Type II	View
Slack	Messaging Integration	SOC 2 Type II	View
Zoom	Meeting Intelligence	SOC 2 Type II	View
LiveKit	Voice & Video	SOC 2 Type II	View
Mem0	AI Memory	SOC 2 Type I	View
ElevenLabs	Voice Synthesis	SOC 2 Type II	View