Security & data

Your workspace is private by architecture, not by policy promise.

Isolation

  • One database per workspace. Your data lives in its own dedicated PostgreSQL database. There is no shared tenancy at the data layer and no cross-workspace queries.
  • One address per workspace. Your workspace is only reachable at your‑org.everjust.app; requests to other subdomains can't touch your database.

Encryption & transport

  • All traffic is served over HTTPS/TLS — including the installed mobile app and all API access.
  • Passwords are stored as salted hashes, never in plain text.
  • Card details never touch our servers — checkout and billing run on Stripe.

Backups

Workspace databases are backed up automatically on a rolling schedule. If you ever need a restore or a copy of a backup, contact us.

Access control

  • Access rights are per app, per user — see Invite your team.
  • Documents adds directory-level access groups on top, so sensitive folders (HR, contracts) can be restricted to named people.
  • Archiving a user disables sign-in immediately while preserving their history.

Your data is yours

  • We don't pool, mine, sell, or train on your data.
  • You can export records to spreadsheets from any list view, bulk-download files as ZIP, and request a full export at any time.
  • On cancellation your data is retained briefly for recovery, then deleted on request or per schedule.

Reporting a concern

Found a vulnerability or have a security question? Email company@everjust.co with "SECURITY" in the subject — it goes to the top of the queue.

Need a hand with this? company@everjust.co — a human answers.