Security & Compliance
Your data security is our top priority. Learn how we protect your information.
Key Security Features
Core security capabilities protecting your data and infrastructure
End-to-End Encryption
All connections are encrypted in transit with TLS
No Table Contents Stored
We store metadata and check results, never full table contents
Secure Authentication
Admin and member roles; credentials kept in Supabase Vault
Enterprise Security & Compliance
What is in place today. We hold no third-party certifications yet.
In Place Today
TLS Encryption
All connections encrypted in transit
Read-Only Access
Our setup guide creates a role that cannot change your data
GDPR
Signed DPA available; EU data subject rights honored
Enterprise Compliance Support
Need specific compliance requirements? Our enterprise team can help.
security@zinklabs.devCustom compliance packages available
1. Data Security Architecture
Data Observ implements a multi-layered security architecture designed to protect your information at every level.
Application Layer
Secure APIs and authentication
Network Layer
Encrypted communications
Infrastructure Layer
Hardened cloud environment
2. Zero Data Storage Policy
We never store your actual data. Data Observ operates on a zero-storage principle:
- All queries run directly in your data warehouse
- Only metadata and aggregated statistics are temporarily cached
- Your sensitive data never leaves your environment
3. Encryption & Secure Connections
All data transmissions are protected with industry-leading encryption standards.
In Transit
- • TLS on every connection
- • Key-pair authentication for Snowflake
At Rest
- • Credentials in Supabase Vault
- • Encrypted database storage (AES-256)
4. Access Controls & Authentication
Multi-layered access controls ensure only authorized users can access your monitoring data.
Authentication
- Email and password, with bot protection at signup
- Sign in with Google
Authorization
- Admin and member roles
- Row-level security isolates every organization
5. Infrastructure Security
DataObserv runs on managed platforms (Supabase, Vercel, Stripe) plus our own pipeline workers.
Regular Updates
Automated security patches
Least privilege
Read-only warehouse role, secrets server-side only
Isolation
Row-level security per organization
Backup
Nightly encrypted database backups
6. Incident Response
Automated checks catch problems early, and we notify affected customers of a personal data breach as our DPA requires.
Health check interval
Error alerting (Sentry)
Database backups
Monitoring
7. Security Contact
Found a security vulnerability? We appreciate responsible disclosure.
Security Team
security@zinklabs.devThis security policy was last updated in March 2026. We regularly review and update our security practices.