Transparent about how we protect your data.

Your data is separated from everyone else's

Every customer's data is isolated at the application level and again in the database, with row-level security enforced on every table. Automated tests that try to read across companies run on every change we ship.

Encryption

• All traffic uses TLS 1.2 or newer.
• Databases, file storage and backups are encrypted at rest.
• Tokens for connected tools (Slack, Jira, ClickUp and others) are encrypted again with per-customer keys and never shown back to anyone.

Access control

• Fine-grained roles and permissions, scoped to offices, departments, teams and projects.
• Sign in with Google or Microsoft, multi-factor authentication, and SAML SSO with SCIM on Enterprise.
• An audit log records sign-ins, permission changes and every action taken by the Standwise AI.
• Our own staff can access a customer workspace only for support, with a stated reason, for a limited time, and visible to the customer's admins.

Privacy by default

• Location is read only at the moment someone checks in or out. It is never tracked in between. Companies can store only whether someone was in the office, or turn location off completely.
• Chat announcements say "time off", never the type or reason.
• Everyone can see what Standwise shares about them and where.

Responsible AI

• Your data is never used to train AI models.
• Compensation, government ID numbers, documents and time off reasons are never sent to AI models.
• Numbers in summaries and reports are calculated by Standwise, not generated. AI writes the wording and links every claim back to its source.
• Anything the AI would change in another tool waits for a person to approve it, unless your admins choose otherwise.

Reliability

Standwise runs on managed cloud infrastructure across multiple availability zones, with continuous backups and regular restore tests.

Your data, your call

Admins can export all of their company's data at any time. When a company leaves, its data is deleted after a short grace period.

Report a vulnerability

If you believe you have found a security issue, email support@standwise.app. We respond to every report and will not take action against good-faith research.