Security and data

Facts about how OpsDesk 360 holds your record, as they stand today. When something here changes, this page changes with it.

Where your data is held

The database and the files you attach are hosted by Supabase in London (AWS eu-west-2). The application runs on Vercel, in London. Email is sent through Resend.

Encryption

Every connection uses TLS. Data is encrypted at rest by the hosting providers. Weekly backups are encrypted with AES-256 before they leave the database server and are kept for 90 days.

The record cannot be changed

Every action on an item is written once to an append-only record. The database itself refuses updates and deletions of that record; there is no administrative route around it.

Access

Each organisation's data is separated at the database level by row-level access control: a query from one organisation cannot return another's rows. People sign in by a link sent to their work email; there are no passwords to steal. Roles are owner, manager and staff.

Backups

A full encrypted backup of the database and attached files is taken every week and kept off the hosting platform. Restoring from it is tested every quarter.

Your rights and our paperwork

A data processing agreement is available on request. OpsVerse Ltd is registered in England and Wales, company number 17213522. Our ICO registration number will appear here once issued. For anything on this page, write to moiz@opsverseai.com.