Security
How CueHand looks after your data
Your clients trust you with their names, numbers, dates and what they owe. Here's how CueHand protects those details today, in plain words.
Everything on this page is something we already do. If you, or the person who looks after your IT, want to see how any of it works, write to security@cuehand.com and ask.
Your business's data
Your enquiries, quotes, clients and payments belong to your business, and only your team sees them.
Kept apart from every other business
Every request to CueHand is checked against the business it belongs to, so one business can't open another's records. Underneath, row-level security is switched on for every table in the database, which stops the tables being read directly from outside the app.
Each person sees what their role allows
Owners, managers and staff have different permissions. Staff can run the day and record what happened, but they can't see prices or payments. Only the owner decides who's on the team and at what level.
Your account, your data
You can delete your account and your business's data from inside the app at any time, and the files you've uploaded are removed with it. A copy can stay in our encrypted backups until those backups are replaced. Before you go, the account owner can download everything: spreadsheets, records and uploaded files.
Where it's kept
Stored in the EU, encrypted on the way and at rest.
Encrypted in transit and at rest
Every connection to CueHand uses HTTPS, and browsers are told never to connect without it (HSTS). Stored data is encrypted at rest by our database provider, Supabase.
Stored in the EU
Your business's records and files are stored in Ireland, in Supabase's EU region, and the app's servers run in Dublin. Some services we rely on, such as email delivery and phone notifications, are based in the United States.
Encrypted backups
Backups run on a schedule and are encrypted before they're stored with Cloudflare. We keep the newest 30, and we've restored one to check that it works.
No card numbers
CueHand records the payments your business receives and tracks what's owed; it never takes your clients' payments. When you pay for CueHand, your card details go straight to Paddle, and we never receive the full card number.
Signing in
Three ways in, and on your phone, a sign-in that's kept encrypted.
Email, Google or Apple
Sign in with your email and a password, Continue with Google, or Sign in with Apple. Passwords are handled by Supabase Auth and are never stored in plain text.
On your phone
In the CueHand phone app, your sign-in is encrypted with a key kept in the iPhone Keychain or the Android Keystore. On Android, the app's data is left out of cloud backups.
How we run it
Checked before every change, with no advertising trackers.
Protection against abuse
Public pages and links have rate limits, and so do sign-in attempts. Your enquiry form has spam protection, including Cloudflare Turnstile.
Checked before every change
Before a change to CueHand is merged, it's checked automatically: tests, a scan for packages with known security problems, and a scan for passwords or keys committed by mistake. Dependabot watches the packages we use for security updates.
No advertising trackers
CueHand has no advertising trackers. The product analytics we keep stay in our own database. Our rule is that analytics never include names, emails or phone numbers, and we check for it.
Who else is involved
The services CueHand relies on to run, and what each one does.
- Supabase
- The database, sign-in and file storage.
- Vercel
- Hosting: runs the app's servers.
- Cloudflare
- Our domain's DNS, email routing, spam protection on enquiry forms, and storage for our encrypted backups.
- Resend
- Sends sign-in, account and billing emails.
- Apple
- Sign in with Apple, and notifications and Live Activities on iPhones (Apple Push).
- Continue with Google.
- Expo
- Delivers the phone app's notifications to Apple.
- GitHub
- Runs our scheduled backups, which are encrypted before they're stored.
- Healthchecks.io
- Tells us if a backup doesn't run. It gets status checks only, never your data.
- Paddle
- When you subscribe, sells you the plan as merchant of record: takes the payment and adds any tax.
Worth knowing
Two-factor sign-in isn't available yet. Use a strong password you don't use anywhere else, or sign in with Google or Apple, which protect your account with their own two-factor sign-in when it's turned on.
Found a security problem?
Please tell us privately, so we can fix it before anyone else finds it.
- Tell us what you found and how to see it for yourself.
- Use your own account to test. Please don't open, change or delete other customers' data.
- Give us the chance to fix it before you publish anything about it.
The same details, for tools that look for them: security.txt