← Back to OnBrio
Security
How we protect your agency data
Agencies trust OnBrio with client contracts, invoices, and communications. Here is how we handle that responsibility.
Data encryption
All traffic is encrypted in transit via TLS. Data at rest is encrypted on our database and storage providers.
Hosting & infrastructure
OnBrio runs on Vercel and Supabase — both maintain SOC 2 Type II certifications.
Access controls
Workspace data is isolated per account with role-based permissions. Client portals use signed magic links.
Your data, your export
Export clients, projects, invoices, and contracts at any time. We do not sell customer data.
GDPR readiness
We support data export and deletion requests. DPAs available during early access.
Roadmap
SOC 2 Type II certification is on our post-launch roadmap. Updates ship in the changelog.
Subprocessors
Supabase
Database, authentication, file storage
Vercel
Application hosting and edge delivery
Stripe
Payment processing
Resend
Transactional email delivery
Security questions or DPA requests: legal@onbrio.com · Privacy policy