Data security at TheValua

We take security seriously - your data is the asset that funds our business.

Hosting & encryption

• All data is hosted on Supabase / PostgreSQL in a tenant-isolated schema, protected by Row-Level Security policies.
• Data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
• Daily encrypted backups are retained for 30 days, with point-in-time recovery for the last 7 days.

Access controls

• Every customer is on a separate Supabase tenant with strict RLS - no other tenant can ever read your rows.
• Internal access is gated by SSO, MFA and just-in-time elevation. We log every privileged action.

Reporting a vulnerability

Found a bug? Email [email protected]. We follow responsible-disclosure timelines and credit reporters publicly when they want it.