Built so a bad day stays small.
Catering runs on other people’s guest lists, dietary needs and deposits. Here is exactly how that is protected, in plain language, so you can answer a client’s vendor questionnaire without calling us.
Your data is isolated at the database, not the app
Every table enforces row-level security, so a query for another workspace's data returns nothing even if the application layer has a bug. There is no admin flag that turns it off; the one key that skips it is held only by our server-side jobs, never by a browser. A nightly automated check confirms that row-level security is switched on for every workspace table and that each one has a policy scoped to the workspace, and it alerts us if either is missing.
There are no passwords to steal
Sign-in is by emailed magic link. We never see, store, or transmit a password, because none exists. That removes the single most common cause of small-business account compromise: a reused password from somewhere else.
Every action is attributable
Changes are written to an audit log with who made them and when, including anything done by Maitre on your behalf, which is recorded as the person who asked plus the fact that AI carried it out. Access to production data by our own staff is logged in a separate admin trail.
Encrypted in transit and at rest
TLS in transit and encryption at rest on the database and file storage. Infrastructure runs on Vercel and Supabase; the full sub-processor list is named in the privacy policy rather than hidden behind a request form.
You can leave with everything
A full JSON export of your data on demand, from Settings → Privacy & data, without asking us. Cancelling does not delete your data, so you can come back or migrate; email privacy@aprondesk.com and we delete it permanently. No hostage-taking, and no export fee.
Payments never touch our servers
Client deposits go through Stripe directly to your own connected account. Card numbers never reach Apron Desk; we store only Stripe reference IDs. Your subscription is billed by Mitryxa through Stripe on the same basis.
The vendor questionnaire, pre-answered
The questions a corporate or institutional client will ask you about us. Copy any of it straight into their form.
- Where is data hosted?
- United States. Application on Vercel, database and file storage on Supabase.
- Is data encrypted?
- Yes, in transit and at rest.
- How do you isolate tenants?
- PostgreSQL row-level security on every table. A nightly automated check confirms it is on and that each workspace table has a workspace-scoped policy.
- Do you use my data to train AI?
- No. We do not train on your business data, and under their commercial API terms neither do our AI providers (Anthropic for Maître, OpenAI for voice-note transcription).
- Can I get an audit log?
- Yes, in the app, covering both human and AI actions.
- What happens if I cancel?
- Export any time. Cancelling does not delete your data; we permanently delete it when you email us to ask.
- Who are your sub-processors?
- Named individually in the privacy policy.
- Do you offer MFA?
- Not today. Sign-in needs access to your email inbox, so protect that inbox with MFA.
- Do you offer SSO / SCIM?
- Not today. Sign-in is passwordless magic link. Tell us if you need SSO and we will scope it.
Found something?
If you believe you have found a vulnerability, email security@aprondesk.com with enough detail to reproduce it. We will acknowledge within two business days. Please do not test against another workspace’s data, and give us a reasonable window to fix before publishing.
See also the privacy policy for what we collect and every sub-processor by name, and the terms for the contract itself.