Data Security

Keeping your business and customer data safe is foundational to ColibriOS. This page explains, in plain language, how we protect it. Questions about our security practices? Email hello@colibrios.com.

Your data is isolated at the database level

Colibri is built on PostgreSQL with row-level security enforced on every table. That means the access rules live inside the database itself — not just in our application code — so each account can only ever read or change its own records. One customer's data is never reachable by another, even in the unlikely event of a bug in the front-end. Your workspace is isolated at the lowest level.

Sensitive data is locked down further

The most sensitive information — login sessions, one-time login codes, and the access tokens for services you connect — lives in tables that the browser cannot read at all. They are reachable only from our secured server infrastructure. This is the strictest posture available, applied to exactly the data that matters most.

Encryption everywhere

All traffic between you and Colibri is encrypted in transit over TLS/HTTPS, and all stored data is encrypted at rest.

Secure sign-in

Users sign in with a secure password or a magic link. Administrative keys that could bypass normal restrictions are held on our servers only — they are never exposed to the browser or shipped in front-end code.

Bank connections

Hosts on eligible plans can connect a bank account so transactions flow into their own bookkeeping automatically. Connections are provided by Plaid. You sign in at your bank inside Plaid's own interface: your banking username and password are never sent to us, never stored by us, and never visible to us, and we never receive full account or routing numbers. What arrives is the bookkeeping itself (account name and type, a masked last-digits reference, the balance, and transaction date, amount, and description), and it lives only in your own workspace under the same database-level isolation as everything else. Every Colibri account signs in with two-factor authentication, and the banking data itself is only readable by a session that has passed it. You can disconnect in one click from the Banking page; that revokes the connection at Plaid as well, and local bank data for the connection is removed within 30 days.

Payments never touch our servers

Subscription and customer card payments are processed by Stripe and PayPal. Card numbers never pass through or rest on Colibri's servers.

Backups & ongoing auditing

Your database is backed up automatically, and we run regular automated security audits to confirm these protections stay in place.

Reporting a concern

If you believe you've found a security issue, please email hello@colibrios.com so we can look into it promptly.