Security
Your AR data is yours.
DueClarity handles receivables data — sensitive financial information. Here is exactly how we protect it.
Encrypted in transit and at rest
All data is encrypted in transit using TLS 1.2+ and at rest using AES-256. This applies to every invoice, customer record, and upload you make.
Row-level access isolation
Your company account is strictly isolated from every other account using row-level security. No DueClarity customer — or DueClarity employee — can query another account's data.
SOC 2 Type II infrastructure
DueClarity is hosted on AWS (us-east-1) via Supabase, which holds SOC 2 Type II certification. DueClarity application controls (access, export, deletion) are documented here — DueClarity itself has not undergone a separate SOC audit.
Your data is never sold or shared
We do not sell, license, or share your AR data with any third party. Your data is not used to train models, benchmark against other accounts, or for any purpose other than powering your analysis.
You control your data
You can export all your data to CSV at any time from account settings. You can request permanent deletion at any time — we will action it within 5 business days.
Minimal data collection
We only store what you upload. We do not require bank credentials, ERP access, or API keys. An aging report CSV is all DueClarity needs to operate.
Infrastructure summary
Cloud provider
AWS (us-east-1)
Database
Supabase — SOC 2 Type II infra
Encryption at rest
AES-256
Encryption in transit
TLS 1.2+
Access control
Row-level security
Data residency
United States
Procurement summary
A one-page reference for security reviews. DueClarity is upload-only — no ERP credentials, no background sync, and no model training on your AR data.
- Isolation: Row-level security — each account queries only its own rows.
- Encryption: TLS 1.2+ in transit · AES-256 at rest (Supabase/AWS).
- Export & delete: Full CSV export from Settings · permanent deletion on request within 5 business days.
- No model training: AR data is never used to train ML/LLM models or benchmark against other customers.
- Activity audit: Timestamped in-app activity log with CSV export from the Activity page.
Questions about security?
If you have a specific security question or want to request data deletion, contact us at hello@dueclarity.com. We respond within 1 business day.