TRUST & SECURITY
Built for government-grade data.
Reimbursa handles government workforce funding data: payroll, employee records, and board correspondence. We architect for that responsibility.
SOC 2 Type IIAES-256 at restTLS 1.2+ in transitFull audit trail
01
Infrastructure security
- SOC 2 Type II certified infrastructureHosted on Supabase's SOC 2 Type II audited cloud platform.
- AES-256 encryption at restAll claim data encrypted at the database level.
- TLS 1.2+ in transitEvery connection encrypted end-to-end.
- Automated daily backupsPoint-in-time recovery across all environments.
- 24/7 infrastructure monitoringPlatform-level monitoring by Supabase's operations team.
02
Application security
- Row-level security on every tableTenant isolation enforced at the database level, not in the application.
- Edge function isolationEach API endpoint runs in its own sandboxed Deno runtime. No shared server state.
- Deny-by-default access controlEmployer, admin, and service roles with explicit permission grants.
- Zero client-side PIIAll sensitive data stays server-side. Widgets are display-only.
- Full claim audit trailEvery action on every claim logged from day one. Tamper-evident event chain.
Questions about our security posture?
Security reviews, questionnaires, and audit documentation for procurement teams are available on request.