Security & data protection

A plain-language look at how EntrepreJee protects your business data — no certifications to hide behind, just what's actually true today.

Your data stays yours

Every table in the database is scoped to your business with Postgres Row Level Security (RLS) — enforced by the database itself, not just application code, so one business's data is never visible to another's.

Encryption in transit and at rest

All connections between your browser, EntrepreJee, and the database are encrypted with TLS. Data at rest is encrypted by our infrastructure provider, Supabase.

Payment data never touches our servers

Card and billing details are handled entirely by Stripe, a PCI-compliant payment processor. EntrepreJee never sees or stores your card number.

Roles and least privilege

Team members get one of three roles — Owner, User, or Viewer — so access to billing, deleting records, and sensitive settings can be limited to only the people who need it.

Optional two-factor authentication

Turn on authenticator-app based two-factor authentication from Settings → Account for extra login protection, with one-time recovery codes in case you lose your authenticator.

Login activity logging

Successful sign-ins are logged with a timestamp and IP address, visible only to the business owner, and automatically deleted after 60 days.

GDPR posture

Our Privacy Policy and Data Processing Agreement describe exactly what data we collect, why, and who it's shared with — including every sub-processor we use.

We don't hold formal certifications like SOC 2 or ISO 27001 yet — we're a small team and would rather say so than imply otherwise. Everything above is real and already in production.

For the full legal detail behind these practices, see our Privacy Policy and Data Processing Agreement.