Where is my data stored, and is it encrypted?

The primary database is PostgreSQL on Supabase, hosted in the United States, encrypted at rest with AES-256; files such as logos and PDF reports are in Supabase Storage in the United States; the assistant's short-term memory is in Upstash Redis in the United States. Every table is isolated per business at the database level, so one business can never read another's rows. Provider backups rotate on the provider's schedule — typically up to thirty days — and residual copies age out of them after that.