What it's for
Programme data includes budgets, risks and decisions that organisations keep confidential. This page sums up how ProjectCAPEX handles it. The full text is on the security page and in the privacy policy.
Where your data lives
- Data is stored in Supabase, a managed Postgres platform that also provides sign-in and file storage.
- The app and the website are served by Vercel.
- Data travels over HTTPS, and Supabase encrypts the database and stored files at rest.
- Access to production systems is limited to authorised staff using multi-factor authentication.
Who can see what
Row-level security in the database limits records to the company that owns them. Inside a company, a project's records are open only to people on that project, plus the company owner and company admins. Your role then decides what you can change, and the database checks it on every change. See Roles and permissions.
Changes made through the app's record forms are written to an audit log that admins can filter by user, action and record type, in Company admin.
AI with your own key
What happens
- Each person adds their own key for a provider they choose
- Requests go from your device straight to that provider
- Under your own account and that provider's terms
- Nothing is sent to another provider instead
What ProjectCAPEX never does
- Receive your key or your prompts
- Store your recordings
- Sell your data
- Use your programme data to train AI models
A request carries what it needs from that programme's records, which can include the names and roles of team members and the names of milestones. ProjectCAPEX stores what you keep: an accepted change, with the passage of the meeting or request it was based on and, for a typed request, its first 500 characters. A health assessment is saved to the project when it runs.
On the web, your key stays in that browser, encrypted with a key the browser cannot export. It belongs to one person and is forgotten on that device when they sign out. On-device speech downloads its model once from Hugging Face, without any audio or programme data. See AI settings and your own key.
Sub-processors
We use three sub-processors, each bound by a data processing agreement. ProjectCAPEX has no AI sub-processor.
- Supabase: database, authentication and file storage
- Vercel: application and website hosting
- Resend: transactional email
Compliance status
- GDPR: ready, with data processing terms, a sub-processor list and deletion on request.
- SOC 2 Type II: committed. The audit is planned and the report will be shared when it is issued.
- ISO 27001: committed, planned after SOC 2.
- HIPAA: planned.
Your rights and your data
You can
- Export a plan to Excel from the app
- Ask us for a full export of your programme data
- Ask us to delete your data
- Request account deletion in Settings, Account
Email hello@projectcapex.com from the address on your account. When an account is deleted, its data is permanently deleted within 30 days, and backups holding it are purged after 30 days. Audit logs are kept for 12 months.
Good to know
- The app keeps your sign-in session, theme and sidebar choice in your browser's storage. It uses no tracking or advertising cookies and no third-party analytics.
- ProjectCAPEX is not intended for anyone under 16.
- To report a security issue, email hello@projectcapex.com with the details.
How you sign in is covered in Sign-in options.