Security

How we protect your data — and keep each client's separate.

Per-client isolation

HaposAI is multi-tenant by design. Every client lives in its own workspace, and content, brand voice, audiences, and outputs are scoped to that workspace — so one client's data never bleeds into another's.

Encryption in transit

All traffic to the application is served over HTTPS/TLS. Data is encrypted in transit between your browser, our servers, and our service providers.

Authentication

Passwords are stored as salted hashes (never in plain text), and we support Google sign-in. Access to workspace data requires authentication and is checked against workspace membership and roles.

Payments

Billing is handled by Stripe, a PCI-DSS Level 1 certified provider. We never see or store full card details.

Infrastructure

The application and database run on established cloud providers with their own physical and network security controls. We follow the principle of least privilege for access to production systems.

Reporting a vulnerability

Found a security issue? We appreciate responsible disclosure — please contact us with the details and we'll respond promptly.