Team data isolated in the database
Postgres row-level security sits on every multi-tenant table. The app connects as a restricted role that cannot bypass it, so a missing check in code still can’t leak another team’s data.
Security & privacy
Your team’s data, kept to your team.
Isolation between teams is enforced by the database itself, not only by application code. Here is what protects your data today — and what we don’t offer yet.
Today
What protects your data.
Secure sign-in
Passwords are hashed with argon2id. Turn on two-factor sign-in with an authenticator app, and team owners can require it for everyone. Sessions use httpOnly cookies.
Private files
Files are never in a public bucket. They are served through signed links that expire after minutes, and only to people allowed to see them.
No AI training on your data
We don’t train models on your content. Your AI key is stored encrypted and never sent to the browser. AI only sees what the person using it may see.
An activity timeline you can export
Review the team’s activity — approvals, role changes, agent runs — and export it as CSV or JSON.
Staff access you can see
Your account shows a log of any time Projoint staff accessed it for support, so nothing happens out of sight.
What we don’t offer yet
We’d rather say it plainly than imply it. If one of these is a requirement for you, tell us — it helps us decide what to build next.
- SSO / SAML sign-in
- Security certifications (SOC 2, ISO 27001)
- Full self-serve export of all team data
You can delete your account from Account settings at any time. For a copy of your data or a deletion request, email privacy@projoint.tech.
Found a vulnerability?
Email security@projoint.tech with a description and steps to reproduce. We read every report and will credit you, with your permission, once a fix ships.
Bring your team’s work into one place.
Free for up to 10 members. No card required. Add AI with your own key when you’re ready.