Your data is safe with us
Grovaly is built on enterprise-grade infrastructure. Every byte of your business data is encrypted, backed up, and protected by strict access controls.
How we protect your data
Enterprise-grade security baked into every layer of the platform.
Encryption in transit & at rest
All data is encrypted using TLS 1.3 in transit. Data at rest is encrypted with AES-256 via Supabase's managed infrastructure.
SOC 2 infrastructure
Grovaly is hosted on Supabase and Vercel — both SOC 2 Type II certified platforms with independent annual security audits.
Role-based access control
Every team member has the minimum permissions required for their role. Sensitive actions are logged with timestamps and user IDs.
Secure authentication
Passwords are hashed with bcrypt. We support SSO and enforce strong password policies. Sessions expire automatically after inactivity.
Daily automated backups
Your data is backed up every 24 hours with point-in-time recovery available. Backups are stored in a separate geographic region.
Audit logging
Every login, settings change, and data export is logged with user identity, timestamp, and IP address for your team's audit trail.
Infrastructure & hosting
We rely on best-in-class infrastructure providers — not self-managed servers.
Vercel
Application hosting & edge network
99.99% uptime SLA · Global CDN · DDoS protection · SOC 2 Type II
Supabase
Database & authentication
PostgreSQL on AWS · Encrypted at rest · Row-level security · SOC 2 Type II
AWS
Underlying cloud infrastructure
Data centers in North America · ISO 27001 · SOC 1/2/3 · PCI DSS Level 1
Privacy & compliance
We handle personal data with transparency and give every user control over theirs.
We process EU personal data lawfully and provide data subject access, deletion, and portability on request.
California residents can request a copy or deletion of their personal information at any time.
Canadian personal data is handled in compliance with Canada's federal privacy legislation.
To make a data access or deletion request, email privacy@grovaly.com
Responsible disclosure
Found a security vulnerability? We take every report seriously. Please email us directly and give us reasonable time to respond before any public disclosure.
security@grovaly.com · We respond within 48 hours
Security questions? Contact us or read our Privacy Policy.