Your chapter data, protected
ChapterPulse is built on SOC 2 Type II certified infrastructure with encryption, access controls, and compliance measures designed for organizations that handle member data.
Infrastructure and security controls
Every layer of ChapterPulse is designed with data protection in mind.
Hosted on certified infrastructure
All production infrastructure providers maintain independent third-party security audits.
Vercel
SOC 2 Type II certified, ISO 27001 compliant. Handles application hosting, edge network, and serverless functions.
Neon (PostgreSQL)
SOC 2 Type II certified. Managed PostgreSQL with automated backups, point-in-time recovery, and encrypted storage.
Cloudflare R2
SOC 2 Type II, ISO 27001. Object storage for file uploads with global edge distribution.
Encryption
Access controls
Data isolation
AI zero data retention
Compliance and regulatory readiness
Built-in protections for the regulations that matter to chapter operations.
CASL compliance built in
Canadian Anti-Spam Legislation requirements are integrated into the newsletter builder, including unsubscribe links and sender identification.
GDPR-ready data handling
Data minimization practices, CASL-compliant newsletter templates, and the ability to export or delete member data on request.
Data retention
Data is retained for the duration of your subscription and deleted within 30 days of termination. You may request data export or deletion at any time.
Legal documentation
Privacy Policy, Terms of Service, and Data Processing Agreement available for your review.
How we handle your data
We do not sell your data. Ever.
Your chapter and member data exists to serve your organization. It is never sold, shared for advertising, or used to build profiles for third parties.
AI features use zero-retention providers
AI-assisted drafting and Conversational Insights are routed through the Vercel AI Gateway to large language model providers that operate under zero data retention agreements. Prompts and responses are not stored beyond the call, are not logged for human review, and are never used to train or fine-tune models. Zero data retention is a hard requirement for any model we enable, which gives us flexibility to adopt new models as the technology evolves without changing your privacy posture. Insights queries respect row-level security and column-level PII gating, so the model only sees what the asking user is already permitted to see.
Integration credentials stay sealed
Credentials for ThoughtSpot, Dark Rhino, StarChapter, and other integrations are encrypted at rest with AES-256-GCM before they reach the database. Once saved they are never returned to any client, not even the admin who entered them. The settings UI only allows replacement, and sync jobs decrypt them in server memory just long enough to run. It works the same way any well-designed system handles a password: you can rotate it, but you cannot read it back.
You own your data
You can export or delete your data at any time. Scheduled CSV exports, draft export, and member data export are all available from within the application.
Questions about security?
We are happy to discuss our security practices, provide additional documentation, or walk through our architecture with your team.