Security at Aura AI Outreach

Encryption

The application is served over HTTPS by Vercel. Supabase provides managed database and authentication infrastructure. Provider controls are described in Supabase's security documentation and Vercel's security documentation. Provider controls do not constitute an independent audit of this application.

Access control

Sign-in uses Supabase Auth. Application workspace-data access uses a server-only database client. Connected-provider credentials are stored per workspace and used by server-side integrations; connection status shows only a key suffix. Revoke a provider credential with its issuer if it may have been exposed.

Tenant isolation

Workspace-data queries use tenant identifiers, and the active workspace is resolved from the signed-in user's available workspaces. These application controls are not a claim that an independent tenant-isolation audit has been completed.

SSO & SAML

The current self-service sign-in uses Supabase Auth. SAML SSO is not included in the currently implemented self-service plans. Contact support to discuss requirements before relying on an enterprise authentication feature.

Audit logging

The application records credit transactions and billing events for its operation. These records are not a complete, customer-exportable audit log of every action.

Penetration testing & compliance

Contact us to request available security documentation before making a procurement decision. This page does not represent a SOC 2 certification or an annual independent penetration-testing programme. Processing-agreement requests are explained on our DPA page.

Reporting vulnerabilities

Found a vulnerability? Email support@auraaia.com. Include reproduction steps without customer data or credentials. Do not access another customer's data or disrupt the service while investigating.