Data Security Overview
Workspace isolation in the database, encrypted files, and what we do and do not claim.
How Your Data Is Protected
Workspace isolation
Row-level security on every table keeps each workspace's data apart, enforced by the database on every query - not only by the interface.
Encrypted files
Every file is encrypted in transit and at rest, and is opened through a time-limited link. A link copied out of the app expires within the hour.
Nobody sees your other clients
A consultant or teammate can never learn which other companies you work with, and neither can you learn theirs.
Sign-in
Sign in with Google (single sign-on) or with email and a password. Sign-in uses the PKCE flow, so no session token ever appears in a web address.
What We Do Not Claim
Certifications
ProposalWorkspace has no FedRAMP authorization and no SOC 2 report. Your team signs in with Google (single sign-on) or with email and a password; enterprise SAML sign-on (Okta, Microsoft Entra) is not available yet.
Was this page helpful?