Safety

Security & Deliverability

Quick facts about how we protect access, data, and outbound email quality.

Infrastructure

Hosted on Vercel with HTTPS by default.
Supabase for database and storage; access keys kept in environment variables.
Stripe for PCI-compliant checkout; no card data is stored on our servers.

Email authentication

Configure SPF, DKIM, and DMARC for the From domain used in SendGrid. Domain authentication reduces spam filtering and keeps board communications trusted. See the email setup notes for a checklist.

Abuse and rate limits

Drafting, exports, and email delivery include rate limits to block automated abuse. Excessive or suspicious activity may be paused automatically.