Security
How we keep your data safe
The practices behind every Rokdot product.
Infrastructure
Rokdot apps run on Vercel with databases on Neon managed Postgres. These providers handle physical security, network protection and hardware, and keep their platforms patched.
Encryption
All traffic to Rokdot uses HTTPS with modern TLS. Databases and file storage are encrypted at rest by our providers.
Application security
Each app checks who you are and what workspace you belong to on every request. Passwords are hashed, sessions are signed, and email content such as HTML is shown in a sandbox.
Access
Only the people who need production access have it, protected by strong authentication. Access is reviewed when roles change.
AI features
AI features send only the content needed for the task to our AI providers, and only when the feature is used. See the Trust center for the providers involved.
Backups and recovery
Our database provider keeps point in time backups so we can recover from mistakes or failures.
Reporting a vulnerability
If you believe you have found a security issue, please contact us through the contact form and we will respond quickly. We ask that you give us time to fix it before sharing it publicly.
More detail, including our subprocessors, is in the Trust center.