- Where your data lives
- Supabase Postgres hosted in the EU (Ireland), for every customer.
- Tenant isolation
- Row-level security on every table, enforced by the database itself rather than by application code.
- Private renewals
- Inside a shared workspace a renewal can be marked private - its title and detail stay with the people you choose.
- In transit
- TLS throughout, HSTS, and a restrictive content security policy on every surface.
- Access control
- Password, magic link or Google. Two-factor authentication with an authenticator app on every plan, free ones included. API keys and recovery codes are stored only as one-way hashes.
- Delivery you can audit
- Every reminder is a persisted job with a per-job idempotency key, so a retry cannot double-send. Owners and admins get a per-workspace audit trail.
- Backups
- Daily encrypted backups with an automated weekly restore-check that restores them and verifies the data came back.
- Payments
- Paddle acts as merchant of record. No card details reach Faybex.
- Your data, on your terms
- Export everything whenever you like, in a format you can open. Delete the account and the workspace goes with it.