Your creative work, protected

kloudboard takes the security of your data seriously. Here is how we protect your creative work and team information.

Report a vulnerabilityPrivacy policy
Workspace access
Role-based
  • OW

    Owner

    Runs the workspace, billing and roles

    Full control
  • ME

    Member

    Boards, Drive and review the owner grants

    Granted
  • GU

    Guest

    Clients and freelancers

    Shared cards only

In transit

TLS 1.2+

At rest

AES-256

Payments

Stripe

Security at every layer

From the network to the database to who can open a board, every layer has its own protection.

Encryption

  • All data is encrypted in transit using TLS 1.2+
  • Data at rest is encrypted using AES-256
  • Social media OAuth tokens are individually encrypted before storage
  • Payment information is handled by Stripe and never touches our servers

Infrastructure

  • Hosted on Vercel with industry-standard infrastructure security
  • Database powered by Supabase with row-level security policies
  • Regular automated backups with point-in-time recovery
  • Isolated environments for development, staging, and production

Access controls

  • Role-based access control for team workspaces
  • Secure authentication via Supabase Auth with email verification
  • Session management with automatic token rotation
  • Audit logging for sensitive operations

Compliance

  • SOC 2 Type II compliance in progress
  • GDPR-compliant data handling and storage
  • Regular security audits and penetration testing
  • Responsible disclosure program for security researchers

Found a vulnerability?

Please report it responsibly. We take all reports seriously and will respond within 24 hours.

Report it