Security & data
Your workspace is private by architecture, not by policy promise.
Isolation
- One database per workspace. Your data lives in its own dedicated PostgreSQL database. There is no shared tenancy at the data layer and no cross-workspace queries.
- One address per workspace. Your workspace is only reachable at your‑org.everjust.app; requests to other subdomains can't touch your database.
Encryption & transport
- All traffic is served over HTTPS/TLS — including the installed mobile app and all API access.
- Passwords are stored as salted hashes, never in plain text.
- Card details never touch our servers — checkout and billing run on Stripe.
Backups
Workspace databases are backed up automatically on a rolling schedule. If you ever need a restore or a copy of a backup, contact us.
Access control
- Access rights are per app, per user — see Invite your team.
- Documents adds directory-level access groups on top, so sensitive folders (HR, contracts) can be restricted to named people.
- Archiving a user disables sign-in immediately while preserving their history.
Your data is yours
- We don't pool, mine, sell, or train on your data.
- You can export records to spreadsheets from any list view, bulk-download files as ZIP, and request a full export at any time.
- On cancellation your data is retained briefly for recovery, then deleted on request or per schedule.
Reporting a concern
Found a vulnerability or have a security question? Email company@everjust.co with "SECURITY" in the subject — it goes to the top of the queue.
Need a hand with this? company@everjust.co — a human answers.