Built so a bad day stays small.
Catering runs on other people’s guest lists, dietary needs and deposits. Here is exactly how that is protected, in plain language, so you can answer a client’s vendor questionnaire without calling us.
Your data is isolated at the database, not the app
Every table enforces row-level security, so a query for another workspace's data returns nothing even if the application layer has a bug. There is no bypass for convenience and no admin flag that turns it off. A nightly automated check attempts cross-tenant reads and fails loudly if any succeed.
There are no passwords to steal
Sign-in is by emailed magic link. We never see, store, or transmit a password, because none exists. That removes the single most common cause of small-business account compromise: a reused password from somewhere else.
Every action is attributable
Changes are written to an audit log with who made them and when, including anything done by Maitre on your behalf, which is recorded as the person who asked plus the fact that AI carried it out. Access to production data by our own staff is logged in a separate admin trail.
Encrypted in transit and at rest
TLS in transit and encryption at rest on the database and file storage. Infrastructure runs on Vercel and Supabase; the full sub-processor list is named in the privacy policy rather than hidden behind a request form.
You can leave with everything
CSV export of your data on demand, from Settings, without asking us. If you cancel we keep your data for 90 days so you can come back or migrate, then delete it. No hostage-taking, and no export fee.
Payments never touch our servers
Client deposits go through Stripe directly to your own connected account. Card numbers never reach Apron Desk; we store only the last four digits and a reference. Your subscription is billed by Mitryxa through Stripe on the same basis.
The vendor questionnaire, pre-answered
The questions a corporate or institutional client will ask you about us. Copy any of it straight into their form.
- Where is data hosted?
- United States. Application on Vercel, database and file storage on Supabase.
- Is data encrypted?
- Yes, in transit and at rest.
- How do you isolate tenants?
- PostgreSQL row-level security on every table, verified nightly by an automated cross-tenant probe.
- Do you use my data to train AI?
- No. Neither we nor our AI provider train on your business data.
- Can I get an audit log?
- Yes, in the app, covering both human and AI actions.
- What happens if I cancel?
- Export any time. We retain for 90 days, then permanently delete.
- Who are your sub-processors?
- Named individually in the privacy policy.
- Do you offer SSO / SCIM?
- Not today. Sign-in is passwordless magic link. Tell us if you need SSO and we will scope it.
Found something?
If you believe you have found a vulnerability, email security@aprondesk.com with enough detail to reproduce it. We will acknowledge within two business days. Please do not test against another workspace’s data, and give us a reasonable window to fix before publishing.
See also the privacy policy for what we collect and every sub-processor by name, and the terms for the contract itself.