Where your data lives and our certifications

DeskCrew runs on a stack of independently certified infrastructure providers, with encryption in transit and at rest and strict per-workspace isolation.

Where your data lives

• Vercel — hosting
• Supabase (managed Postgres) — the database
• Cloudflare — at the edge
• AWS — underneath

Encryption and isolation

• Every request is served over HTTPS with HSTS.
• Your data is encrypted in transit (TLS) and at rest (AES-256, via Supabase).
• Each workspace is isolated by multi-tenant scoping, so one tenant cannot read another's tickets, customers, or settings.
• Responses also carry baseline hardening headers, including X-Content-Type-Options: nosniff and a strict Referrer-Policy.

Certifications

These underlying providers are independently certified to:

• SOC 2 Type II
• ISO 27001 / 27017 / 27018
• GDPR