Security
How we keep your data safe.
Multi-tenant isolation
Supabase Row Level Security enforces per-tenant data boundaries at the database layer. No tenant can see another tenant's data, period.
Encryption everywhere
TLS 1.3 in transit; AES-256 at rest in Supabase. API keys to Printanista, e-automate, and DocuSign are stored as environment secrets in Vercel.
Data ownership
You own your data. Export anytime via CSV, JSON, or API. Full data dump on contract termination.
Infrastructure
Hosted on Vercel and Supabase — both SOC 2 Type II. Hourly automated backups; point-in-time recovery available.
Detailed security and compliance documentation (SOC 2 attestation path, incident response policy, subprocessor list) is available under NDA. Contact hello@overwatch.fyi to request.