Security & Data Protection
Your data, in an instance of its own.
Every client runs on a dedicated managed instance of CrownEvents.OS. Here’s how it’s built and protected, and how your data is handled from go-live to deletion.
0client
Per instance, with its own database, file storage and address
UShosted
On Vercel and Supabase, both SOC 2 Type II audited
Dailybackups
Database records, encrypted at rest and in transit. Uploaded files are not included
0hours
To notify you of any confirmed breach of your data
Architecture
Isolated by design
Many business applications keep every customer in one shared database and rely on permissions to keep their records apart. CrownEvents.OS gives each client its own infrastructure instead.
01
Its own database
A dedicated Postgres database in a separate Supabase project, provisioned for your organization alone.
02
Its own private file storage
Contracts, proposals and documents live in a private storage bucket. Every download checks that the person asking is a signed-in member of your organization.
03
Its own address
Your instance is publicly reachable only at a dedicated subdomain of northcrowngroup.com.
Hosted in the United States, on Vercel and Supabase infrastructure that is SOC 2 Type II audited.
Controls
Protected at every layer
Every instance carries the same controls, configured and maintained by NorthCrown.
Access
Who can sign in, and what each person can do.
- Named logins
- Each person has an individual login that is never shared. Every user accepts the in-app Platform User Terms before first use.
- Invitations
- Limited to your organization’s email domains. Inviting anyone else requires your written confirmation that they are bound by confidentiality.
- Roles
- Owner, Admin, Member and read-only Viewer, enforced on every change. A Viewer can export the scorecards and the ROI report without an editing role.
- Sessions
- Sign-ins expire automatically and are limited per person. Removing someone ends their sessions immediately.
- Sign-in protection
- Repeated failed sign-in attempts lock the account temporarily.
- NorthCrown access
- A single, clearly labeled NorthCrown Support account, disclosed in your agreement, for resolving the issues you raise.
Data
How your records are protected, kept and traced.
- Encryption
- At rest (AES-256) and in transit (TLS).
- Backups
- Daily, retained for seven days. Uploaded files are not included in database backups.
- Activity log
- Sign-in attempts, team changes and exports are recorded.
- Traceable exports
- PDF and Excel exports are watermarked with your organization's name and a unique trace code identifying who exported them and when. CSV files carry the code in their file name. Printed pages are stamped with who printed them and when.
- Maintenance
- Security patches and platform updates are applied for you. There’s nothing for your IT team to install.
- Breach notification
- Within 72 hours of a confirmed breach of your data.
Data Lifecycle
From the first day to the last
Your data is yours; the platform and methodology are ours. Every agreement includes the schedule below, from the export window to certified deletion.
From go-live
Active term
Your data lives in your own instance, handled only by the providers listed on the Security page, and its database is backed up daily (uploaded files are stored redundantly, not backed up). Your team exports reports whenever it needs to, and a full export of your raw data is available on request.
End of term, or termination
Subscription ends
The platform stops accepting changes and your export window opens. Nothing has been deleted.
30 days
Export window
Request a full export of your data (events, tasks, timelines, budgets, vendors, ROI data and documents) in standard formats. It covers your data; the platform’s templates and methodology stay with NorthCrown.
After the window closes
Permanent deletion
Your instance, its database, file storage and backups are permanently deleted within 30 days, and you receive a certificate of deletion. Nothing is archived or held in escrow. Only the limited enforcement records described in your agreement remain, and provider logs expire on their own schedules.
Subprocessors
The providers behind your instance
A short list, disclosed in full in your agreement. Each one processes client data only to provide its part of the service.
| Provider | What it does | Notes |
|---|---|---|
| Vercel | Application hosting | US region |
| Supabase (on AWS) | Database and file storage | US region, with a separate project for every client |
| Resend | Email delivery | Invitations, notifications and support messages |
| Anthropic | AI-assisted features (not enabled) | Not used by any client instance today. If offered later, it is added with 30 days’ notice and only on your election |
| Optional sign-in | Sign-in only, when that feature is used | |
| Stripe | Billing | Only once card billing is enabled, and it handles billing data only |
What we never do with your data
- Sell, rent or trade your data to anyone
- Share it with other clients, or pool it for cross-client analytics
- Use it to train AI models, ours or anyone else’s
- Use it for anything other than running and supporting your instance
- Keep your data past the deletion date: no archives, no escrow. Only the limited enforcement records in your agreement remain
Security Reviews
Completing a vendor security review?
We’re glad to walk your IT or security team through any of this in detail. Uptime targets, backup and recovery objectives, and the full subprocessor terms are written into your agreement’s hosting, security and data protection schedule.