Last updated:
Our commitment to security is validated by industry-leading certifications and independent audits.
Last audit:
View ReportLast audit:
Last audit:
Last audit:
Provider: Supabase (AWS)
Regions: EU (Frankfurt), EU (Ireland)
At Rest: AES-256
In Transit: TLS 1.3
Frequency: Continuous with point-in-time recovery
Retention: 30 days
| Service | Purpose | Location | Security |
|---|---|---|---|
| Supabase | Database, Authentication, Storage | EU | Security |
| Vercel | Application Hosting, CDN | Global | Security |
| Stripe | Payment Processing | Global | Security |
| Anthropic | AI Processing (Claude API) | US | Security |
| Resend | Transactional Email | US | Security |
Last updated: January 26, 2026
We handle your data with care and transparency. Your data is never used to train AI models.
Enhanced privacy controls for sensitive financial data.
You have the right to delete your data at any time.
0-24 hours
Account access is immediately revoked. User data is marked for deletion.
24-72 hours
All user data is permanently deleted from production databases and backups. Deletion logs are generated for audit.
72 hours
All user data is irrecoverably deleted. Only anonymized usage statistics (no PII) are retained for compliance.
To delete your account, go to Settings > Account > Delete Account. You will be guided through the deletion process.
Go to Account SettingsWe welcome responsible disclosure of security vulnerabilities.
security@tabba.ioOr email directly: security@tabba.io
Please give us reasonable time to fix vulnerabilities before public disclosure. We commit to acknowledging reports within 48 hours and providing regular updates.