Security at PostDemo
Overview
Your call data is the most sensitive thing you could trust us with. Here's exactly how we protect it.
Encryption
All data is encrypted in transit (TLS 1.2+) and at rest (AES-256 via our infrastructure providers).
Infrastructure
PostDemo is hosted on Vercel and Supabase (running on AWS), with database-level Row Level Security ensuring each customer can only ever access their own data.
AI processing
Transcripts are processed by Anthropic (Claude) and AssemblyAI via their commercial APIs. Your content is never used to train AI models.
Data retention & deletion
You can delete any call or your entire account at any time. Deletion permanently removes transcripts, files, and generated artifacts. There's also an optional setting to automatically delete the original audio file immediately after transcription completes.
Payments
Payments are handled by Stripe. Card details never touch our servers.
Subprocessors
We use the following subprocessors to operate PostDemo:
| Subprocessor | Purpose |
|---|---|
| Supabase | Database, authentication, and file storage |
| Vercel | Application hosting and infrastructure |
| Anthropic (Claude) | AI-powered transcript analysis and artifact generation |
| AssemblyAI | Audio transcription |
| Stripe | Payment processing and billing |
| Resend | Transactional email delivery |
| PostHog | Product analytics |
| Sentry | Error monitoring |
| Inngest | Background job processing |
Independent review
Our application undergoes independent security review prior to major releases.
Responsible disclosure
Found a vulnerability? Email security@postdemo.ai and we'll respond within 48 hours.