Trust & Security
Straight answers to the questions we would ask before handing anyone our project data. Some of these answers are uncomfortable. We give them anyway, because a vague assurance would tell you nothing.
Can you read my project data?
Technically, yes. The backend talks to the database with a service key that can read every row. That is how the dashboard renders your board and how the MCP tools write your cycles; there is no way to run this service without it.
What bounds that in practice: PAPI is a one-person company, so exactly one person (the founder) holds that access. He opens your project content only when you ask for support or a bug demands it. He reviews aggregate numbers (counts, durations, success rates) routinely; he does not read the text of your tasks and decisions.
If “the operator could read it” is a dealbreaker for your project, PAPI is not the right home for that data today. We would rather you know that now.
Where does my data live?
Supabase, in Ireland. Your account and project data sit in a Supabase Postgres database hosted in the EU (Ireland, eu-west-1).
Around it: the dashboard is served from Vercel’s edge network, the hosted MCP server runs on Railway (mcp.getpapi.ai), and transactional email goes through Resend. Where a provider operates from the United States, transfers rely on standard contractual clauses; the privacy policy has the full detail.
How is access controlled?
Three doors, each locked separately.
- Dashboard: you sign in through Supabase Auth with email and password, or with your GitHub or Google account. Passwords are hashed by Supabase; we never see them.
- MCP server: every call carries a bearer token, either a
papi_API key or an OAuth access token. We store only SHA-256 hashes of these and compare them in constant time; the raw value is shown to you once and cannot be recovered by anyone, including us. - Database: browser-facing paths use a restricted key where row-level security applies. Backend paths authenticate first, then scope every query to your account at the application layer, with row-level security behind it as a second net.
Is it end-to-end encrypted?
No. End-to-end encryption would mean our servers cannot read your project state, and then they could not do their job: assemble planning context, render your board, carry decisions across sessions. A project intelligence layer that cannot read the project would be a filing cabinet.
What you do get: TLS on everything in transit, encryption at rest in Supabase, hashed passwords, and hashed API keys. We can read the database; we cannot sign in as you or recover your keys.
Does an AI model see my data?
The one you run, plus one narrow exception on our side. PAPI’s loop makes no AI calls from our servers: when you plan or review, the thinking happens inside the AI session you are already running, on your own subscription. We never train models on your content and never sell your data.
The exception: if you upload a brief file during onboarding, our backend sends its parsed text to Anthropic’s API once to extract structure, then discards the file. Anthropic’s commercial API is contractually committed not to train on that content. And if you configure your own Anthropic key for optional commands, those calls run from your machine with your key; we never see them.
Who else touches my data?
Eight providers, and each one gets only what its job requires:
| Service | What they handle |
|---|---|
| Supabase | The database and sign-in. All account and project data, EU (Ireland). |
| Vercel | Serves the dashboard; request logs and cookieless analytics. |
| Railway | Runs the hosted MCP server; your MCP requests pass through it. |
| Stripe | Billing. Your card goes straight to Stripe; we only ever see subscription status. |
| Resend | Transactional email (signup, reset, magic links). |
| Anthropic | Brief text during import, as described above. No training on your content. |
| GitHub | Sign-in identity and public-repo access, only if you connect it. |
| Sign-in identity (email and profile), only if you use it. |
That is the whole list. There are no advertising or tracking networks behind it.
Can I take my data out?
Export yes, deletion by email for now. You can export your board to CSV from the dashboard today, on every tier including Free.
Full account deletion is not self-service yet. Email cathal@getpapi.ai from your account address and your account plus everything attached is hard-deleted within 30 days. You can already delete individual projects yourself from Settings. Self-service full export and deletion are on the roadmap; we will not pretend they exist before they do.
What do you not have?
No SOC 2, no ISO 27001, no pentest report, no security team. PAPI is one person, and buying a badge the company cannot yet live up to would be theatre.
What stands in for those today: a small attack surface, deliberately boring choices (Supabase Auth, hashed credentials, TLS everywhere, one hosted path), and this page telling you plainly where the limits are. If your context requires certified infrastructure, PAPI is not there yet; when that changes, this page changes first.
Reporting a security issue
Found something? Email cathal@getpapi.ai and it goes to the top of the queue. You will get a reply from the person who can fix it, usually the same day.