Security
Built to keep your numbers private.
Rates, margins and client briefs are some of the most sensitive things a team writes down. These are the controls that protect them in Keisan today.
Last updated · October 23, 2026
In transit
HTTPS
Encrypted traffic in production
At rest
Encrypted
Briefs, estimates and rate cards
Training
Never
Your content is not used to train models
Controls
What protects your work
These cover the public site, the signed-in workspace, the database and the AI providers that help draft your estimates.
Encrypted at rest and in transit
Briefs, estimates, rate cards and proposals are encrypted at rest, and production traffic is served over HTTPS.
Scoped to your account
Database policies return only the rows that belong to the signed-in account, so one account cannot read or change another’s work.
No model training
Your content is used to produce your estimates and nothing else. It is never used to train models or sold to anyone.
Key separation
Public browser keys, server-only service keys and AI provider keys are kept apart in environment configuration and never sent to the browser.
Sign-in on every private page
Accounts sign in through Supabase Auth. Every private page and API route checks who is signed in before it reads or writes data.
Read-only approval links
An approval link opens one estimate for one client to read and answer. It cannot edit the estimate or reach anything else in your workspace.
Development
How we build
Security is part of how each change is written and checked, not a list worked through at the end.
- Check who is signed in at every route boundary, before any data is read.
- Validate public inputs, such as the contact form, before anything acts on them.
- Keep service keys and infrastructure access to the minimum needed.
- Keep client briefs, estimates and provider secrets out of logs.
- Run type, lint, test and build checks before a change ships.
Your part
Keeping your account safe
Accounts
Protect your sign-in
Use a strong, unique password, do not share accounts, and sign out on shared machines.
Estimates
Review before you send
Check line items, rates, totals and timelines before a proposal goes to a client. You decide what is sent.
Disclosure
Tell us quickly
Found a weakness? Follow the vulnerability disclosure policy.