Skip to content
Trust

Security and data handling.

The measures that protect your account, your data and your payments.

In short

How Serpfull protects your data: row-level security, TOTP two-factor authentication, encrypted transport, processor-hosted card data and UK GDPR.

  • Every tenant table is protected by database row-level security; members only see their organisation's data.
  • Two-factor authentication with any TOTP app, with support for a backup device.
  • Card details are entered into our payment provider's secure fields and never touch our servers.
  • Hosted-browser credentials live only in the worker secret store, never in the database or client code.
  • All traffic is HTTPS with HSTS; API keys are stored as hashes and shown once.
  • Report a vulnerability to support@serpfull.com.