Security & Privacy

ProperSafe never stores your password. Signing in is handled by Clerk, a dedicated identity provider used by many SaaS companies. Clerk manages sign-in, sign-up, and password resets on our behalf.

You sign in once and stay signed in across every ProperSafe app (Bow-Tie and others) — one login, one session, no re-entering credentials as you move between them.

Your data is stored in a managed PostgreSQL database (Supabase), hosted on AWS infrastructure. It's encrypted in transit (every connection uses HTTPS) and encrypted at rest by the database host.

Every record is tagged to your organization, and every request is checked on our servers — not just hidden in the interface — before any data is read or changed. A user has to be signed in andbelong to your organization to see your data. One customer's organization can never see another's.

Within your organization, your team shares access to your work, so people can collaborate — but nobody outside it can get in.

Billing is handled entirely by Stripe. ProperSafe never sees or stores your card details — that stays with Stripe, whose whole business is handling payments securely.

Every action — reading, creating, editing, deleting — is checked on the server before it happens. API keys and other secrets used by our apps live only in secure server configuration; they are never written into the app's code or sent to your browser.

Want more detail, or have a question for your own security review? Get in touch— happy to talk it through.