Back to OnBrio
Security

How we protect your agency data

Agencies trust OnBrio with client contracts, invoices, and communications. Here is how we handle that responsibility.

Data encryption

All traffic is encrypted in transit via TLS. Data at rest is encrypted on our database and storage providers.

Hosting & infrastructure

OnBrio runs on Vercel and Supabase — both maintain SOC 2 Type II certifications.

Access controls

Workspace data is isolated per account with role-based permissions. Client portals use signed magic links.

Your data, your export

Export clients, projects, invoices, and contracts at any time. We do not sell customer data.

GDPR readiness

We support data export and deletion requests. DPAs available during early access.

Roadmap

SOC 2 Type II certification is on our post-launch roadmap. Updates ship in the changelog.

Subprocessors

Supabase
Database, authentication, file storage
Vercel
Application hosting and edge delivery
Stripe
Payment processing
Resend
Transactional email delivery

Security questions or DPA requests: legal@onbrio.com · Privacy policy