Safer InventorySafer Inventory

Security

How we protect your data.

Security is not an add-on. Every part of the Safer Inventory infrastructure is designed to keep your business data private, encrypted, and available.

Infrastructure

Hosted on enterprise-grade infrastructure

  • Infrastructure hosted on Railway (backend) and Vercel (frontend) — enterprise-grade cloud platforms with independent security programs and 99.9%+ uptime
  • PostgreSQL database with TLS encryption in transit on all connections
  • Data encrypted at rest using AES-256
  • Automatic daily backups with point-in-time recovery
  • 99.9% uptime SLA with redundant failover

Authentication

Secure authentication via Clerk

All user authentication is handled by Clerk, a dedicated identity provider built for modern applications.

  • Multi-factor authentication (MFA) available on all accounts
  • SSO-ready via SAML and OIDC for enterprise teams
  • Secure session management with automatic token rotation
  • Brute-force and credential-stuffing protections baked in

Data privacy

Your data, your jurisdiction

Safer Inventory is built and operated by Pistis Contracting Inc. (operating as Safer Inventory), a Canadian company. Your data is protected under Canadian law and handled under contractual data protection obligations with all sub-processors.

  • PIPEDA compliant — Canada's federal private-sector privacy law
  • Annual third-party penetration testing and security assessments
  • We do not sell, share, or use your data to train AI models
  • Data deletion requests honoured within 30 days
  • Full data export available at any time from your account settings

API security

HMAC-signed API keys

If you use the Safer Inventory REST API, every key is HMAC-signed and scoped to specific permissions. Keys are never stored in plaintext.

  • Per-key rate limiting (per-minute and per-day)
  • All API calls logged with IP, timestamp, and endpoint
  • Webhooks delivered with signed payloads so you can verify authenticity

Responsible disclosure

Found a vulnerability?

We take security reports seriously. If you discover a potential security issue, please contact us directly and we will respond within 48 hours.

security@saferinventory.com

Please do not publicly disclose vulnerabilities before giving us a chance to investigate and remediate. We appreciate responsible disclosure and will acknowledge researchers who help us improve security.