Trust

Security at Portpine

How we protect sourcing data, supplier records and payments.

Data protection

All traffic is served over TLS and data is encrypted at rest. Every record is scoped to your account with row-level access rules enforced on the server, not the browser.

Access control

Accounts are role-based. Administrative actions are separated from ordinary user access, and privileged operations are verified server-side on every request.

Payments

Card details never touch our servers. Checkout and billing are handled by our PCI-compliant payment provider.

Reporting a vulnerability

If you believe you have found a security issue, contact us through the contact page with the details and we will respond promptly.