Skip to main content

Security at Glanz CRM

Your diamond inventory, client records, and pricing data are the core of your business. Here is how we protect them.

Encryption in Transit

  • All traffic is served over HTTPS/TLS 1.2+; plain HTTP requests are redirected and HSTS is enforced.
  • Connections to our database (Supabase/PostgreSQL) are TLS-encrypted at all times.

Encryption at Rest

  • Database backups and storage are encrypted at rest by our infrastructure provider.
  • Supabase storage buckets require authenticated requests; public access is disabled for business data.

Access Controls

  • Role-based access: Owner, Manager, and Appraiser roles see only what they need.
  • All administrative actions are performed through authenticated, permission-checked server endpoints — database writes are restricted to trusted server code.
  • Row Level Security (RLS) policies isolate each tenant’s data at the database level.

Authentication

  • Password authentication handled by Supabase Auth with secure, httpOnly session cookies.
  • Session tokens and secrets are server-side only and never shipped to the browser.

Data Center & Backups

  • Primary data residency in Singapore (ap-southeast-1) via Supabase/AWS.
  • Automated daily database backups with point-in-time recovery.

Incident Response

  • Security issues can be reported to support@glanzcrm.com — we acknowledge reports within one business day.
  • Affected customers are notified of any data incident without undue delay, per Thai PDPA requirements.

Questions about security or data handling? See our Privacy Policy or contact support@glanzcrm.com.