How we protect your data

Isolation per workspace

Each workspace has its own database. One customer's records are never stored in the same tables as another's.

Sign in

Accounts are confirmed with a one-time code sent by email, and you can sign in with Google. Sessions use secure, HTTP-only cookies.

Permissions and audit

Roles control who can see and change what. Important changes, including those made through the AI agent, are recorded in the activity history.

Encryption

All traffic to MERP is served over HTTPS.

Your data, your exit

You can export your data at any time. If you close your account, we delete workspace data according to our privacy policy.

Report a vulnerability

Email [email protected] with the subject "Security". Please give us reasonable time to fix an issue before disclosing it.