Security at Plan The Do

Your wedding plans are personal. We treat them with the care they deserve.

Encryption

All data is encrypted in transit using TLS 1.2 or higher, and at rest using AES-256 on managed Postgres infrastructure.

Authentication

Sign-in is handled by Supabase Auth with hashed credentials, secure session tokens, and optional Google single sign-on. Sensitive actions require a fresh session.

Access controls

Row-level security policies ensure that only you and the partners you invite can access your wedding details. Roles are stored separately from user profiles to prevent privilege escalation.

Payments

All billing is processed by Stripe. We never see or store your full card details.

Backups & reliability

Your data is backed up daily with point-in-time recovery. Our infrastructure is hosted in EU data centres with industry-standard uptime SLAs.

Reporting a vulnerability

If you believe you have found a security issue, please email security@planthedo.com. We aim to acknowledge reports within one working day.