Your business data, locked down.
Encryption
All traffic uses TLS 1.2+ in transit. Job photos, decision cards, proposals, and signed agreements are encrypted at rest.
Access controls
Row-Level Security policies scope every query to the signed-in user or organization. Team roles gate destructive actions; audit log records agreement, proposal, and billing events.
Authentication
Email + password with leaked-password checks (HIBP), Google sign-in, and password reset over email. Passwords are hashed by our identity provider — we never see them.
Backups & availability
Daily point-in-time backups with 7-day retention. Our infrastructure runs on a hardened, SOC 2-audited cloud platform.
Payments
Card data never touches our servers — payments are handled by our PCI-DSS Level 1 processor. We only store the last 4 digits and expiration month for receipts.
Reporting a vulnerability
Found something? Email security@progrid.online. We respond within one business day.