Authentication
Multi-factor authentication (email or authenticator app) required after signup
- Privileged platform roles (super admin, agency admin) must use MFA
- Password reset and session management via Supabase Auth
Trust Centre
Security and privacy you can verify
Elevale is committed to GDPR, UK GDPR, and global privacy standards. This section explains how we protect your data and where to find our legal documents.
GDPR, data retention, privacy rights, security, audit logging, and legal document links.
What you can expect from Elevale
Plain-language outcomes from our platform documentation: encryption, access control, audit logging, data rights, and retention, without implementation jargon.
Encryption
In transit: TLS 1.2+ for all connections
- At rest: Supabase encrypted storage; OAuth tokens encrypted server-side
- Secrets: API keys stored as hashes; no client-side token encryption
Access control
Row Level Security (RLS) on all tenant data
- Role-based access: system, organization, and workspace levels
- Custom workspace roles with granular permissions
Clear deletion timelines
Retention periods are consistent across billing, automated jobs, and platform documentation.
View retention policy → Reviews
Help other directors find Elevale
If Elevale is working for your leadership team, a review on G2 or Capterra helps other business directors discover strategic execution software that fits SMEs and growing teams.
Trusted partners behind the platform
Elevale uses trusted subprocessors to deliver the platform. The authoritative list is published at elevale.app/legal/subprocessors. We provide 30 days notice before adding subprocessors that process personal data.
| Provider | Purpose |
|---|
Legal and compliance library
All content is published from Elevale platform documentation in Supabase.
Compliance guides
Cookie Policy
Read guide →Data retention and deletion
Read guide →Your privacy rights
Read guide →Subprocessors and integrations
Read guide →Security and data protection
Read guide →Audit logging
Read guide →Agency and reseller data responsibilities
Read guide →Incident response and data breaches
Read guide → Need help?
Questions about security or privacy?
Reach our privacy and security teams directly. Data rights requests are handled within our documented 30-day SLA.