Security

Your chapter data, protected

ChapterPulse is built on SOC 2 Type II certified infrastructure with encryption, access controls, and compliance measures designed for organizations that handle member data.

Infrastructure and security controls

Every layer of ChapterPulse is designed with data protection in mind.

Hosted on certified infrastructure

All production infrastructure providers maintain independent third-party security audits.

Vercel

SOC 2 Type II certified, ISO 27001 compliant. Handles application hosting, edge network, and serverless functions.

Neon (PostgreSQL)

SOC 2 Type II certified. Managed PostgreSQL with automated backups, point-in-time recovery, and encrypted storage.

Cloudflare R2

SOC 2 Type II, ISO 27001. Object storage for file uploads with global edge distribution.

Encryption

Data encrypted in transit (TLS 1.3)
Database connections secured via SSL
Integration credentials for ThoughtSpot, Dark Rhino, StarChapter, and Mailchimp are encrypted at rest with AES-256-GCM
Credentials are never returned to any client after save, not even to the admin who entered them. You can rotate, but you cannot read back
Decrypted only in server memory, only for the duration of a sync job, only within the owning organization's scope

Access controls

Role-based access control: 14 granular permissions across 6 preset templates, with owner, admin, and member governance roles
Row-level security enforced at the database level, not just application level
Session verification on every API request
Column-level PII gating (member contact details, volunteer applicant data) behind separate permission flags

Data isolation

Multi-tenant architecture with per-organization data isolation
Row-level security policies prevent cross-tenant data access
Organization-scoped database transactions

AI zero data retention

AI drafting and Conversational Insights are routed through the Vercel AI Gateway to providers operating under zero data retention agreements
Prompts and responses are not stored, not logged for human review, and never used to train models
Insights queries respect row-level security and column-level PII gating, so the model only sees what the asking user can see

Compliance and regulatory readiness

Built-in protections for the regulations that matter to chapter operations.

CASL compliance built in

Canadian Anti-Spam Legislation requirements are integrated into the newsletter builder, including unsubscribe links and sender identification.

GDPR-ready data handling

Data minimization practices, CASL-compliant newsletter templates, and the ability to export or delete member data on request.

Data retention

Data is retained for the duration of your subscription and deleted within 30 days of termination. You may request data export or deletion at any time.

Legal documentation

Privacy Policy, Terms of Service, and Data Processing Agreement available for your review.

How we handle your data

1

We do not sell your data. Ever.

Your chapter and member data exists to serve your organization. It is never sold, shared for advertising, or used to build profiles for third parties.

2

AI features use zero-retention providers

AI-assisted drafting and Conversational Insights are routed through the Vercel AI Gateway to large language model providers that operate under zero data retention agreements. Prompts and responses are not stored beyond the call, are not logged for human review, and are never used to train or fine-tune models. Zero data retention is a hard requirement for any model we enable, which gives us flexibility to adopt new models as the technology evolves without changing your privacy posture. Insights queries respect row-level security and column-level PII gating, so the model only sees what the asking user is already permitted to see.

3

Integration credentials stay sealed

Credentials for ThoughtSpot, Dark Rhino, StarChapter, and other integrations are encrypted at rest with AES-256-GCM before they reach the database. Once saved they are never returned to any client, not even the admin who entered them. The settings UI only allows replacement, and sync jobs decrypt them in server memory just long enough to run. It works the same way any well-designed system handles a password: you can rotate it, but you cannot read it back.

4

You own your data

You can export or delete your data at any time. Scheduled CSV exports, draft export, and member data export are all available from within the application.

Questions about security?

We are happy to discuss our security practices, provide additional documentation, or walk through our architecture with your team.