Row-level isolation
Multi-tenant workspace isolation is enforced with Postgres row-level security in Supabase.
Security
The controls that exist today, stated without certification claims.
Each control below is in place in Vertica today. Where you can check one yourself, the card says where.
Access and isolation
Workspace boundaries
Authenticator-app MFA
Each user can add an authenticator app (TOTP) to their own login, and remove it again.
Where: Settings › Security
Infrastructure
Service boundaries
Hosting
The application runs on DigitalOcean, the database is on Supabase, and DNS and edge delivery use Cloudflare.
Payments
Payments use Stripe Checkout, so card data does not touch Vertica servers.
Transactional email is delivered through Resend.
Application controls
Credentials and events
Integration credentials
An integration key you connect, such as your Mailchimp API key, is encrypted with AES-256-GCM before it is stored.
Where: Settings › Integrations
Workspace audit trail
Membership, billing and support activity is recorded per workspace, including every action Vertica support takes in it. Owners and admins can read it.
Where: Settings › Data & access
Browser protections
Vertica enforces a Content-Security-Policy and additional security headers.
Workspace deletion
The workspace owner deletes it by typing its ID and confirming. It disappears at once and is purged after 30 days; until then support can restore it.
Where: Settings › Data & access
Vendors
Purpose-limited data sharing
Customer content is sent to AI providers (Anthropic, Perplexity and Firecrawl) solely to produce the output you request. Every vendor that processes customer data is listed below with what it handles; regions are on the vendor disclosure; uptime is on the live status page.
- Supabase
- Database, authentication, and file storage
- Anthropic
- AI generation (Claude) for plans and deliverables
- Perplexity
- Web research for grounding (receives the search terms built from your product and industry)
- Firecrawl
- Page retrieval for grounding (receives the URLs you ask us to read, and the search terms built from your product and industry)
- Stripe
- Payment processing and subscription billing
- Resend
- Transactional email delivery
- PostHog
- Product analytics: page views, clicks and scroll depth, with the text on the page masked (only after cookie consent is granted)
- Cloudflare
- CDN, DNS, and network security
- DigitalOcean
- Application hosting
Request access
Bring your next vertical plan into one shared workspace.
Registrations are invite-only. Request your demo instance and we'll set up a workspace for your firm.