How your data is protected

Data is encrypted in transit with TLS and at rest at the storage layer. File attachments sit in a private bucket that is never publicly readable.

Household isolation

Every record is bound to a household, and row-level security in the database makes it structurally impossible for one household to read another's data. That isolation is checked by automated tests, not just asserted in a policy document.

Accountability

An activity log records who viewed, created, changed or deleted each record, so nothing happens in your household without a trace.