Security
Your AR data is yours.
DueClarity handles receivables data — sensitive financial information. Here is exactly how we protect it.
Encrypted in transit and at rest
Customer data stored in Supabase is encrypted at rest by the hosted platform and protected in transit using encrypted connections. This applies to invoices, customer records, and uploads stored by the service.
Row-level access isolation
Your company account is strictly isolated from every other account using row-level security. No DueClarity customer — or DueClarity employee — can query another account's data.
SOC 2 Type II infrastructure
DueClarity is hosted on AWS (us-west-2) via Supabase, which holds SOC 2 Type II certification. DueClarity application controls (access, export, deletion) are documented here — DueClarity itself has not undergone a separate SOC audit.
Your data is never sold or shared
We do not sell or license your AR data, use it for advertising, train models on it, or benchmark it against other customers. Service providers process data only as needed to operate DueClarity.
You control your data
You can export your company AR data to CSV from account settings. Company Admins can permanently delete shared AR data in-app; full account deletion can be requested from Settings.
Minimal data collection
AR analysis is based on the data you upload. We also store the account, billing, security, and service information needed to operate DueClarity. We do not require bank credentials, ERP access, or customer-provided API keys.
Infrastructure summary
Cloud provider
AWS (us-west-2)
Database
Supabase — SOC 2 Type II infra
Encryption at rest
Supabase hosted-platform encryption
Encryption in transit
Encrypted connections
Access control
Row-level security
Data residency
United States
Procurement summary
A one-page reference for security reviews. DueClarity is upload-only — no ERP credentials, no background sync, and no model training on your AR data.
- Isolation: Row-level security — each account queries only its own rows.
- Encryption: TLS 1.2+ in transit · AES-256 at rest (Supabase/AWS).
- Export & delete: Full CSV export from Settings · permanent deletion on request within 5 business days.
- No model training: AR data is never used to train ML/LLM models or benchmark against other customers.
Questions about security?
If you have a specific security question or want to request data deletion, contact us at hello@dueclarity.com. We respond within 1 business day.