Legal
Security
Protecting your data is fundamental to how we build and operate BatchWorks. Here is an overview of the measures we have in place.
Infrastructure
BatchWorks is hosted on industry-leading cloud infrastructure with encryption at rest and in transit. Our database is managed by Supabase, which provides automated backups, point-in-time recovery, and network isolation.
Authentication
We support secure authentication via email/password and Google OAuth, powered by Supabase Auth. All passwords are hashed using modern, industry-standard algorithms. Sessions are managed with secure, HTTP-only cookies.
Access Control
BatchWorks enforces role-based access control (Owner, Admin, Manager, Staff) at both the application and database levels. Row-level security policies ensure that users can only access data belonging to their own organisation.
Data Isolation
All customer data is logically separated by organisation. Every database query is scoped to the authenticated user's organisation, preventing cross-tenant data access.
Encryption
All data in transit is encrypted using TLS 1.2 or higher. Data at rest is encrypted using AES-256. API keys and secrets are stored securely and never exposed to client-side code.
Third-Party Integrations
Connections to third-party services such as Xero and MYOB use OAuth 2.0, meaning we never store your external account passwords. Integration tokens are encrypted at rest and can be revoked at any time from your settings.
Reporting a Vulnerability
If you discover a security vulnerability, please contact us immediately at jarred@jetworks.ai. We take all reports seriously and will respond promptly.