How we protect your data

Access control

Every table that holds user data enforces row-level security. Policies are scoped to the authenticated user, to their entity, or to platform administrators — never open by default. Directory surfaces expose an explicitly enumerated set of safe columns; contact details are not among them.

Transport

All traffic is served over HTTPS. Documents are delivered exclusively through short-lived signed links generated after a server-side permission check.

Administrative access

Administrative capability is granted through a dedicated role table, never through a flag on your profile. Sensitive administrative functions are not executable by ordinary accounts.

Monitoring

A daily security snapshot records the platform posture and raises alerts when a policy or privilege drifts from its expected state.

Shared responsibility

We secure the platform; you control what you upload, publish and share. Use per-document permissions for anything sensitive.