Security at TalkQuote

TalkQuote is built on Supabase, a managed backend platform hosted on AWS's global cloud infrastructure. This means our infrastructure benefits from AWS's industry-leading physical security, network hardening, and redundancy.

Your data lives in managed PostgreSQL databases with automated daily backups, and the platform runs 24/7 infrastructure monitoring to detect and respond to issues proactively.

Our data handling practices align with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), so your information is managed with Australian privacy standards in mind.

Every business's data is logically isolated using Row Level Security (RLS) policies enforced at the database level — not just hidden in the app interface, but structurally inaccessible to anyone else.

RLS is enforced directly by the database, so no business can ever access another's quotes, invoices, client details, or expenses, even if a request somehow reached the server. Each account only ever sees its own data.

All traffic to and from TalkQuote is encrypted in transit using TLS, so your data is protected as it travels between your device and our servers.

Data is encrypted at rest on our managed infrastructure. Sensitive integration tokens are additionally protected with AES-256-GCM encryption before they are stored.

Payment data is handled directly by Stripe, a PCI-DSS Level 1 certified processor. TalkQuote never sees or stores your credit card details — card numbers live only with our payment provider.

Account passwords are securely hashed and never stored in plain text. Sign in with email and password, or use Google OAuth to authenticate with a trusted identity provider.

Sessions use short-lived rotating tokens, limiting the window in which a compromised session could be misused.