Security and trust
What we can verify about how Cuniro protects your workspace — not a marketing promise, a plain list of what's actually implemented.
What we don't claim
No formal certifications
We don't hold SOC 2, ISO 27001, HIPAA, or PCI certification, and we don't claim to.
No guaranteed uptime or backup SLA
We don't publish a guaranteed uptime percentage or recovery time objective.
No claim of zero vulnerabilities
No software is guaranteed bug-free — we fix issues as they're found, we don't claim otherwise.
How your data is protected
The actual mechanisms, not a general statement.
HTTPS everywhere
Every connection to the site and the app is encrypted in transit.
Private, isolated workspace
Your business's data is scoped to your workspace — other businesses on Cuniro cannot see it.
Secure password reset
Password resets go through Supabase Auth's own reset-by-email flow, not a manual process handled by Cuniro staff.
Careful account deletion
Deleting a workspace goes through dedicated safeguards, not a single irreversible checkbox.
What's actually implemented
Verifiable mechanisms, described plainly.
HTTPS everywhere
Every request to the site and app is encrypted.
Private workspace
Your business's members, payments, and settings are isolated from every other business.
Owner password never visible to Cuniro staff
Cuniro's own admin tools cannot see or set your password.
Team access, scoped to your workspace
People you invite can access your workspace; they cannot see other businesses' data.
Account-deletion safeguards
Deleting a workspace requires deliberate steps, not one accidental click.
Validated file uploads
Uploaded files (like a business logo) are checked against their real file type and size before being stored, in a location scoped to your business only.
Security questions
Are you SOC 2 or ISO 27001 certified?
No. We don't hold a formal security certification, and we won't claim one we don't have.
Can Cuniro staff see my password?
No. Password resets go through Supabase Auth's standard email-based flow — Cuniro's own tools never display or set your password.
Is my business's data visible to other Cuniro customers?
No. Every business's data is isolated to its own workspace.
Are WhatsApp messages sent automatically or securely stored?
Messages are always drafted for manual review and sent by you from your own WhatsApp — Cuniro never sends on its own.
What happens if I delete my account?
Account deletion goes through dedicated safeguards designed to prevent accidental data loss, rather than a single irreversible action.
Questions about security we haven't answered?
Reach out and we'll give you a straight answer.