Security at Supapitch
We handle sensitive email data and take that responsibility seriously. Here's how we keep your data safe.
Encryption
Application traffic uses HTTPS. Connected-provider credentials are encrypted before storage with the configured application key.
Access Controls
Role-based access control ensures only authorized team members can access sensitive data. Audit logs track all access.
Infrastructure
The web app and API run on managed cloud infrastructure with request logging and service health monitoring.
Data Isolation
Application data is scoped by workspace and checked against the signed-in user's organization.
Sending Controls
Approval modes, suppression lists, unsubscribe handling, and per-inbox sending limits help teams control outreach.
Accountability
Workspace audit logs record sensitive changes and campaign actions for review by authorized team members.
Have security questions or want to report a vulnerability?
security@supapitch.com