Security and your data

Where your data lives, and who can see it

The questions a business owner asks before handing over jobs, photos and customer details, answered plainly.

Where it lives

Stored in the EU. Every outside company listed.

Your jobs, photos, videos and documents are stored with Supabase in the EU (Ireland). We publish every outside company that handles personal data for us, and where each one runs.

  • Database and uploaded files: Supabase, EU (Ireland)
  • Job videos prepared for playback: Google Cloud, UK (London)
  • Emails the app sends: Resend, EU (Ireland)
  • Encrypted offsite backups: Cloudflare
  • Reading plate and label photos, only when you switch it on: Anthropic, United States

Stored in

EU (Ireland)

The database and every uploaded file, with Supabase.

The full list of outside companies →

Kept apart

Your records are kept apart from every other business’s.

Every job, photo and customer record belongs to one business. The database itself enforces that, not only the app: it hands a signed-in person the records of their own business and no one else’s.

  • Job photos, videos and reports sit in private storage
  • They open through temporary links that expire
  • Switch a person off and they lose access to your records

Job files

Private

Photos, videos and reports open only through temporary links.

Our own access

KeelSync staff can’t open your records on their own.

To help with a problem, we can only enter your business through a support session that your admin approves.

  • Your admin approves each session, with a code from an authenticator app
  • The session is timed and ends by itself
  • Every session is logged, where your admin can read it in Settings, under Support access log

Staff access

By approval

A timed support session that your admin approves.

Signing in

Your own login, and a code for the sensitive step.

Everyone on your team has their own login, with an email and a password. Where an action is sensitive, such as approving support access, the app also asks for a code from an authenticator app.

  • Everything travels over HTTPS, and browsers are told never to use anything else
  • Your admin decides who is on the team and who is switched off

In transit

HTTPS only

Between your devices and the app.

Questions about your data?

Email hello@keelsync.co.uk. If you think you have found a security problem, tell us the same way.

The privacy policy sets out how your details are handled.

Start 2-month free trial