We hold quality records that auditors will want to see for years. We take that seriously.
Your quality records are stored on Supabase (AWS US-East), encrypted at rest with AES-256 and in transit with TLS 1.3. Daily database snapshots are retained for 7 days — and you can download your own complete CSV export in one click, anytime, so a current copy is always within reach.
We never sell or share your data. Row-level security isolates every organization's records at the database layer — no customer can ever see another's data, on every one of our tables. Role-based access controls (Owner / Admin / Inspector / Viewer) keep permissions tight.
Recorded inspection measurements and submitted audit answers are write-once — the database itself rejects edits, not just the app. A closed NCR refuses changes to its details until it is formally reopened, and once work starts on a CAPA it becomes a permanent quality record that cannot be deleted. Where deletion is allowed, it leaves a named, timestamped entry in the activity log.
We will give 90 days' notice. You can export all your data anytime — and we will send you a complete data package before any shutdown so nothing is ever stranded.
Your data is always yours. Export it anytime.
Start your free trial