Updated Oct 31, 2026

Security

How Babul keeps each company's product apart and safe.

Your data stays yours

Every row a company owns carries its company, and the database itself hides other companies' rows. One company can never read another's.

Sign-ins we hold

Role passwords are sealed. The web app can write them but never read them back. Only the capture worker opens them, to sign in.

Capture

The browser that walks your site goes out only through a proxy that refuses private addresses, so a capture cannot reach anything inside our network or yours.

In transit and at rest

Everything goes over HTTPS. Files and the database are encrypted at rest by our providers. Only the people who run Babul can reach production.

Report a problem

Found a security issue? Email security@babul.dev. We aim to reply within two working days. Please give us time to fix it before you tell others.