Security
Last updated: March 2026
Infrastructure
HumanWox is hosted on Vercel's edge network with the primary deployment region in EU West (London). All data is stored in Supabase PostgreSQL with automated daily backups. Evidence files are stored in Supabase Storage with encryption at rest.
Data protection
All data is encrypted in transit using TLS 1.2 or higher. Row-level security is enforced at the database layer, ensuring each organisation's data is fully isolated. No organisation can access another organisation's data.
Access controls
Role-based access control is enforced across the platform. Every action is logged in an immutable audit trail. Approval workflows enforce separation of duties for evidence sign-off.
Recovery
Recovery Time Objective: 4 hours. Recovery Point Objective: 24 hours based on daily backup cycles.
Contact
For security enquiries or to report a vulnerability, contact security@humanwox.com.