Security and privacy
Customers see a published page. Never your board.
What reaches a customer
- Only mapped status, date, action, and file fields.
- Columns named like notes, costs, prices, margins, budgets, fees, or salaries are refused.
- A customer sees only projects they were invited to.
- File links are signed, last five minutes, and re-check access on every download.
How your data is kept
- Hosted on Vercel in the EU (Dublin), with the database in the EU (Ireland).
- Connection tokens and mailbox passwords are encrypted with AES-256-GCM.
- Passwords are hashed. Sessions expire after 12 hours.
- Every workspace is isolated, and automated tests try to read across workspaces.
More detail
The security page, privacy policy, data processing terms, and list of subprocessors are public.
#Security#Privacy#GDPR
Try it on a real job. 14 days free, no card.
Start free trial