Trust
What we do with your data, in plain words.
Where your data lives
Customer data is stored in Neon (Postgres) and Vercel, in the United States.
Railway runs some of our code and holds no customer data.
Services we use most.
The exact list for your build is written down at the start.
- Stripe (payments)
- Twilio and Resend (texts and email)
- Anthropic and OpenAI (AI)
- Google (Workspace and Maps)
- QuickBooks (connected to your own account)
- Sales tools such as Apollo, Apify, Instantly and Dripify (when your build uses them)
Who can see it
Inside Inertia, only the people doing the work see your data, and only when the work needs it. Outside specialists see it only during a review you've agreed to.
Sign-in uses OAuth, usually a magic link or multi-factor. If you have single sign-on with MFA, we use yours.
What the AI may and may not do
The AI reports what is on file. It never invents a number to make things look better.
Your data never trains anyone else's AI. The only AI it shapes is the assistant inside your own tool.
When AI answers from your data, the answer is checked against your records, word for word, before you see it.
What a person approves
A person approves anything that bills, sends, or signs.
Texts and email
Carriers want the business registered, the opt-outs handled, and every message logged. That part is built once, and available to every build we do.
Screenshots and case studies
Screenshots on this site never show a customer's real details: they are blurred, replaced with made-up names, or demo data.
Backups and incidents
The database has point-in-time recovery, plus regular external backups made with standard Postgres tools. Uploaded files are backed up every two hours.
No security incidents to date, as of November 2026.
Security reviews, scoped to your build.
Security is scoped to each build. Depending on what it handles, that can mean penetration tests, code reviews, data-leak audits, audits of how personal data is used and stored, and AI data-governance reviews, by specialists including a data-privacy lawyer and a former head of cybersecurity at a Fortune 500 company.
What we claim, and what we don't
The services that store your data, Neon and Vercel, are SOC 2 audited. We don't have our own SOC 2 report; we follow its practices.
Leaving
No hostages. Ask for your data and you get it. Then we delete it, except records the law requires us to keep, which our privacy policy lists. And we shake hands.