Security
Bank-level isolation, built in from the first table
Your raise is confidential. Here is specifically how workspace data is kept apart, who can see what, and what we have not built yet.
How isolation works
Four things that hold the line
Isolation enforced below the app
Workspaces are separated by the data layer itself, not by application code that has to remember. A query that omits its workspace filter returns nothing — not another workspace’s rows — and the application has no privileged path around that boundary.
Encrypted connections
Traffic between the application and its data runs over an encrypted private channel, and production is configured to accept encrypted connections only.
Roles, scoping, and an audit trail
Workspace roles are owner, admin, member, and advisor. Advisors are scoped to the campaigns they are added to — nothing else in the workspace is visible to them. Every mutation is written to an audit log.
Abuse protection
Every endpoint is rate limited, with the tightest limits on anything reachable without a sign-in.
Data ownership
It's your data. It behaves like it.
Your data leaves whenever you want
Export the full workspace to CSV at any time, on every plan — including Free.
Downgrading never deletes data
Over-limit records become read-only. Plan caps block creating new records, never reading or exporting the ones you already have.
Deletion means deletion
Workspace deletion and full account deletion are both self-service, whenever you decide to use them.
Infrastructure and access
What it runs on
Payments
Handled end to end by an established PCI-compliant payment provider. Card details never touch our servers, and we never store them.
Infrastructure
Runs on major cloud infrastructure inside a private network, with automated backups, point-in-time recovery, and credentials held in a managed secrets store rather than in code or configuration.
Canaried deploys
Every new release is smoke-tested in isolation before any production traffic is moved to it, and a bad one is rolled back without a redeploy.
Authentication
Handled by a dedicated identity provider. We never see or store a plaintext password.
Being direct about it
SSO and SAML are not shipped yet
Single sign-on is planned for the Enterprise plan and is not available today. If SSO is a requirement for your team, get in touch so we can tell you where it stands.
Questions about how your data is handled
Read the privacy policy and terms of use, or start a free workspace and see the isolation model for yourself.
Start free