Security & Trust
How Pendravo handles your data, ownership, export, confidentiality, and access control, stated plainly, no jargon.
Your data is yours
As between Pendravo and your company, you own everything you enter into the platform, full stop. That's not a marketing line, it's written into our customer agreement, and it applies to every customer.
Exportable for 30 days if you leave
If you ever decide to leave, your data stays exportable for 30 days after your account ends, so a decision not to continue never turns into losing access to your own records. After that window, it may be deleted from our systems.
We never use your data for marketing without permission
We don't use your name, your logo, or your data for marketing, in a case study, a quote, a logo wall, anywhere, without your separate, explicit written permission first. No exceptions, no assumed opt-in.
Access control down to the field
Every application on the platform shares the same access control layer, so your admin decides exactly who can see and do what, down to individual tables and fields, not just who's in and who's out.
Who processes your data
We build on a small set of trusted providers that process data on your behalf under contract. Data is served over TLS in transit and encrypted at rest by our managed database and storage provider.
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Managed database & file storage | United States |
| Vercel | Application hosting & CDN | United States / global edge |
| Mailgun | Transactional & notification email | United States |
| Anthropic | AI features (only when a workspace enables AI; not used for training) | United States |
A Data Processing Agreement (DPA) is available for customers. See our Privacy Policy.
Where we are, honestly
We're an early-stage company. The commitments above are real and in place, and we're continuing to invest in our security program as we grow. We'd rather tell you exactly where we stand than imply a maturity we haven't reached yet, so if security is a deciding factor, talk to us and we'll walk through the specifics and share our DPA.
Report a vulnerability
Found something? Please email security@pendravo.com and we'll respond promptly. For privacy questions, reach privacy@pendravo.com.