Security

Balance is pre-beta, and we’re building it with the assumption that our earliest partners are going to trust us with sensitive revenue data. This page describes what we do today. It is maintained by Balance Systems, Inc. and is not a certification or an audit.

Access & authentication

• Admin access to production infrastructure is limited to Balance staff, protected by unique accounts and multi-factor authentication where the provider supports it.
• Application data lives in Postgres with row-level security enabled on every user-facing table. Server-side code uses a service role that we keep out of the browser bundle.

Encryption

• All traffic to trybalance.io and to our API is served over HTTPS (TLS 1.2+).
• Data at rest in our database and object storage is encrypted by our infrastructure provider using industry-standard AES-256.

Data handling

• We collect only what we need to reply to you and operate the site. See the Privacy Policy for the full list.
• Email delivery goes through our own sender subdomain (notify.trybalance.io) with SPF, DKIM, and DMARC configured.
• We do not sell personal data. We do not run third-party ad trackers on this site.

Subprocessors

A short list of infrastructure providers is disclosed in our Privacy Policy. We prefer a small number of reputable providers over a long tail.

Vulnerability reporting

If you believe you’ve found a security issue, please tell us before disclosing it publicly. Email help@trybalance.io with a description, reproduction steps, and any relevant context. We will acknowledge within a few business days and work with you on a fix.

Please do not run automated scans against production, attempt to access data that isn’t yours, or degrade service for other users while researching.

Roadmap

As Balance moves from pre-beta to general availability we’ll formalize additional controls (audit logging, backup restore drills, documented incident response, and a formal subprocessor page). This page will be updated as those land.

Contact

Security or trust question? Email help@trybalance.io.