Access and encryption
TLS protects data in transit. Hosting and database providers supply encryption at rest. Google refresh tokens receive application-level encryption with keys outside the database.
Last updated · August 3, 2026
Security
Factual controls designed into RankPortfolio; no unverified certification claims.
Least privilege
The Google scope is read-only. Supabase Row Level Security scopes customer data to authorized workspace members. Provider secrets remain server-only.
Operations
Structured redaction, audit events, dependency checks, backups, incident handling, and responsible disclosure are documented controls. Contact heroes@divisionbyheroes.com.