MyProposal is built on security-first infrastructure. Here's exactly how your data and your clients' data is protected.
Encryption
- All data is encrypted at rest using AES-256.
- All data in transit uses TLS 1.3.
- Database backups are encrypted and retained for 7 days.
Infrastructure
MyProposal runs on Supabase (Postgres) and Vercel. Both providers maintain SOC 2 Type II certifications. Data is stored in the EU (Frankfurt) by default.
Access controls
Row-level security on the database means your data is only accessible with your credentials. Even MyProposal engineers cannot read your proposal content without explicit permission (e.g. a support request).
Note
We never sell your data, your clients' data, or any behavioural data to third parties. Our business model is subscriptions.
Penetration testing
We conduct penetration testing quarterly. If you find a security vulnerability, please report it to security@myproposal.app.