Five locks on
every query.
Your data,
in layers.
- 1Encrypted on diskAES-256 at rest, including backups, with keys you control.
- 2Encrypted in transitTLS 1.3 between every app, replica and backup.
- 3Only the right rowsRoles and row-level security decide what each user can see.
- 4Every access recordedAn audit log of who touched what, ready for your auditors.
Secure by default.
Strict when you need it.
Encryption everywhere
TLS 1.3 in transit and AES-256 at rest, including backups, WAL archives and replicas.
Your keys
Bring your own keys from AWS KMS, Azure Key Vault, Google Cloud KMS or an HSM. Revoke them and the data goes dark.
SSO, MFA and SCIM
Sign in with Okta, Entra ID or Google. Users join and leave with your directory automatically.
Row-level security
Postgres policies make each tenant see only its own rows, enforced by the database rather than your app.
Audit everything
pgaudit captures who ran what and when, streamed to your SIEM in real time.
Data residency
Choose the country your data lives in, including backups. It never leaves without your say-so.
Built to help you
pass audits.
Postgres on your own servers keeps data where your regulator wants it, and every control above leaves evidence your auditors can check.
Your security team
will have questions.
Good. Our security engineers will answer every one, along with your questionnaire.