Where your data is stored
Account and project data is stored with Supabase, in the European Union (Ireland), as our privacy policy describes. Payments are handled by Stripe: we never see or store your card number.
Encrypted in transit
The website and the application are served over HTTPS, and the application talks to its database only over encrypted connections.
Who can see and change what
Every person has a role: Owner, Admin or Member. The Owner can set, for each role and for every tab, whether it can view or edit it. Viewing off hides the tab; editing off makes it read-only, and the server refuses the change, not only the screen.
Your organization is separate from others
Access to each organization’s data is enforced in the database itself (row-level security). Another company cannot open your projects, suppliers, customers or settings.
A record of changes
The Activity tab keeps an audit log of each project: who created, renamed or deleted it, and which part values were changed from what to what.
Supplier links
When you send a supplier a link to quote or confirm online, the link is a long random address that works without an account and shows only what you chose to send. Anyone who holds the link can answer, so send it only to the supplier.
Your data stays yours
You can download a copy of your project data from the Projects screen, and most lists (parts, stock, inquiries, purchase orders, the order list, costs, quotations and spare parts) can be exported as CSV or saved as a PDF. When a trial or subscription ends, the account becomes read-only and your data is kept; you can still view and export it.
Closing your account
The organization owner can request deletion of the account in Settings. It is a scheduled request: you can cancel it before the planned date, 14 days later, and otherwise the account and its data are permanently deleted.
What we do not claim
AssembleFlow does not hold SOC 2, ISO 27001 or any other security certification. If your company needs a security questionnaire answered, write to support@assembleflow.io and we answer it honestly.