Encryption in transit.
All traffic between clients and our services travels over TLS 1.2 or higher. We do not operate public endpoints without encryption.
Security
How we protect business information.
Our published practices for data protection, access management and operation of our products.
Data protection
Security across the product.
Encryption at rest.
Databases backing our products store information encrypted with AES-256, managed by the infrastructure provider (Supabase on AWS).
Tenant isolation.
SynvaxisApp is multi-tenant: each business operates over its own isolated dataset, enforced at the database level through Row-Level Security policies.
Authentication and authorization.
Sessions are based on JWT tokens issued by Supabase Auth. Access to internal resources follows the principle of least privilege with explicit roles.
Automatic backups.
Daily backups managed by the database provider, with standard retention. Backups never leave the operating region.
Data residency.
Primary infrastructure operates in United States regions. We do not transfer customer data outside that perimeter without explicit notice.