Solutions · Security & compliance

Five locks on
every query.

Every query passes five independent protections, and every attempt is written to an audit log, whether it succeeded or not. Send a normal request, then play the attacker.
AES-256at rest
TLS 1.3in transit
100%of queries audited
app
TLS 1.3
SSO + MFA
row-level security
encrypted at rest
audit log
data
Choose a request above.
Defence in depth

Your data,
in layers.

  1. 1Encrypted on diskAES-256 at rest, including backups, with keys you control.
  2. 2Encrypted in transitTLS 1.3 between every app, replica and backup.
  3. 3Only the right rowsRoles and row-level security decide what each user can see.
  4. 4Every access recordedAn audit log of who touched what, ready for your auditors.
AES-256TLS 1.3row-level securityaudit log
Controls

Secure by default.
Strict when you need it.

Encryption everywhere

TLS 1.3 in transit and AES-256 at rest, including backups, WAL archives and replicas.

Your keys

Bring your own keys from AWS KMS, Azure Key Vault, Google Cloud KMS or an HSM. Revoke them and the data goes dark.

SSO, MFA and SCIM

Sign in with Okta, Entra ID or Google. Users join and leave with your directory automatically.

Row-level security

Postgres policies make each tenant see only its own rows, enforced by the database rather than your app.

Audit everything

pgaudit captures who ran what and when, streamed to your SIEM in real time.

Data residency

Choose the country your data lives in, including backups. It never leaves without your say-so.

Compliance

Built to help you
pass audits.

Postgres on your own servers keeps data where your regulator wants it, and every control above leaves evidence your auditors can check.

GDPR & India's DPDP ActData stays on your servers, in your country. Access and deletion leave an audit trail.
HIPAAEncryption, role-based access and complete audit logs for health data.
PCI DSSNetwork isolation, encryption and logged access for cardholder data environments.
SOC 2 & ISO 27001on our roadmapOur own certifications are on the roadmap. Until then, we'll answer your security questionnaire in full.

Your security team
will have questions.

Good. Our security engineers will answer every one, along with your questionnaire.