Security
Security
How CybrRM keeps each workspace's data separate and sign-in safe, in plain words.
What protects your data
Two-step sign-in
Everyone signs in with a password and a code from an authenticator app. You also get ten one-time recovery codes, stored only as hashes. New accounts have 7 days to set it up, and sensitive settings need it straight away.
Workspaces kept apart
Each workspace’s data is kept apart by rules in the database itself (row-level security), not only by what the screens show.
Roles
Roles decide who can read, change and manage things in a workspace.
API keys
The secret part of an API key is stored only as a salted hash.
Files
Files are private to the workspace. Download links expire within minutes.
Payments
Card details never touch CybrRM. The payment pages are Stripe’s.
Who hosts it
These services run CybrRM. They are also the outside services listed in the privacy policy.
- Supabase: Our database and sign-in. It stores your workspace's records and files and signs people in.
- Vercel: Runs the app and serves this website.
- Stripe: Takes card payments and keeps card details. CybrRM never sees your card number.
- Resend: Sends the emails CybrRM sends, such as invitations, billing notices and invoices you email from Books.
More in the privacy policy.
Found a security problem?
Email our support address (not set up on this site yet). Tell us what you found, where you found it, and the steps to see it for ourselves. Please do not include anyone’s password or other people’s private information, and please do not use the weakness beyond what you need to show it exists.
What we don’t claim
- We have no security certifications and no outside audit reports to show you.
- We make no promises about encryption or backups beyond what our hosting providers do themselves, and we do not run backups of our own.
- We publish no uptime numbers.
- No service can be made perfectly safe. The points above are what we do, and nothing more is being promised.
Try CybrRM with your own work
14-day free trial. No card needed.