Our commitment to security
Security is built into every layer of OperonOps. We rely on enterprise-grade infrastructure providers and follow industry best practices to protect your data.
Infrastructure
- ✓Hosted on Vercel (application) and Supabase (database and storage), both running on AWS
- ✓Data centers located in the United States (us-west-2)
- ✓Cloudflare provides DDoS protection, WAF, and DNS security for all traffic
Data encryption
- ✓All data encrypted in transit using TLS 1.2/1.3
- ✓All data encrypted at rest using AES-256
- ✓Database backups are encrypted
Access controls
- ✓Role-based access control (admin and member roles)
- ✓Each organization's data is fully isolated — no cross-tenant data access
- ✓Authentication handled by Supabase Auth with secure session management
- ✓Minimum 8-character password requirement enforced at signup
Backups and availability
- ✓Database backups performed daily by Supabase
- ✓Application deployed on Vercel's global edge network with high availability
- ✓Backup retention: 7 days
Data privacy
- ✓We do not sell your data
- ✓We do not use your data for advertising
- ✓Data is stored in the United States
- ✓Full privacy policy at operonops.app/privacy
Incident response
- ✓Security incidents affecting customer data will be communicated promptly by email
- ✓Remediation steps will be taken immediately upon discovery
Responsible disclosure
If you discover a security vulnerability in OperonOps, please report it to support@operonops.app. We will acknowledge receipt within 48 hours and work to resolve confirmed issues promptly.