Security
Your data stays yours, and stays in the EU.
What protects your company’s data in Danube, in plain words: where it is stored, how it is encrypted, how it is kept apart from other companies, and who can get in.
- EU · Ireland
- TLS
- AES-256
- Row Level Security
- 2FA
- SOC 2 Type II infrastructure
What protects your data
Ten things working for you, every day.
No jargon, no badges we don’t own. Just what is actually in place.
Stored in the EU
Your company’s data is stored in the European Union, in Ireland (AWS region eu-west-1).
Encrypted in transit
Every connection (browser, app, database) goes over TLS (HTTPS). Nothing travels in clear text.
Encrypted at rest
The database, its backups and your files are encrypted on disk with AES-256.
Each company sees only its own data
Every record belongs to an organization, and Row Level Security in the database refuses anything else: the rule is enforced by the database, not just by the screens.
Integration secrets in a vault
SmartBill and Stripe keys and email passwords are stored encrypted in Supabase Vault, never as plain text in a table.
Google sign-in or password, plus 2FA
Sign in with Google or with email and password, and turn on two-step verification with an authenticator app (TOTP).
Daily automatic backups
The database is backed up automatically every day, so a bad day doesn’t become a lost year.
SOC 2 Type II infrastructure
The infrastructure we run on (Supabase and Vercel) is audited under SOC 2 Type II. The reports are theirs, not Danube’s.
Access and activity log
Sign-ins are logged, and every record keeps its history: who changed what, when, with the previous value one click away.
GDPR
Personal data is processed under the GDPR. The privacy policy says what we collect, why, and what your rights are.
Read the privacy policy
Where Danube runs
Proven infrastructure, in the EU.
Danube is built on established providers instead of servers in a back room. Each does one job, and each is audited independently.
Danube does not hold a SOC 2 or ISO 27001 certification in its own name. The SOC 2 Type II reports mentioned here belong to Supabase and Vercel.
Found a security issue?
Write to us at contact@danubecrm.com. We read every report and reply to each one.
Questions
Security, answered.
Where is my data stored?
In the European Union: the database runs on Supabase in the AWS Ireland region (eu-west-1). Backups stay in the same region.
Can another company on Danube see my data?
No. Every record is tied to your organization and the database applies Row Level Security to every query: a user from another company gets nothing back, whatever screen or request they use.
Is Danube SOC 2 certified?
Not in its own name, and we don’t claim to be. The infrastructure Danube runs on (Supabase and Vercel) is audited under SOC 2 Type II.
Can I get my data out?
Yes. Any board can be exported to Excel at any time. To have your organization’s data deleted, write to us; the privacy policy explains how.
Questions about security or the GDPR?
Ask us before you sign up. We’ll answer in writing, as precisely as we can.