Where is our data stored and is it encrypted?

Your data is stored in Supabase, which runs on AWS infrastructure in the us-east-1 region (Northern Virginia). All data is encrypted at rest using AES-256 encryption and encrypted in transit using TLS 1.2+.

Database backups are encrypted and managed by Supabase's infrastructure. File attachments uploaded to tasks are stored in Supabase Storage, which also uses encrypted-at-rest storage on AWS S3.

Tenant isolation is enforced at the database level through row-level security (RLS) policies. Every query is scoped to your organization — there is no shared access between tenants, and the isolation is enforced by the database engine, not just application logic. This means even if there were a bug in the application code, the database itself would prevent cross-tenant data access.