Security

You trust us with your conversations.
We don't take that lightly.

TheNodeHarbor processes the most sensitive part of your operation: what your team and your clients say to each other. Here's how we protect it — in architecture, in permissions, and in process.

Per-company isolation

Every company lives isolated at the database level (row-level security in PostgreSQL) plus a second verification layer in the application. Your company's data never crosses with anyone else's — it's defense in depth, not a promise.

Per-member permissions

Every integration belongs to whoever connects it, and each member only sees the projects they're part of. Flag conversations and tasks as private when the context calls for it. Billing and settings: admins only.

Human in the loop

Security is also about process: the AI never runs actions on its own. It proposes — and everything that becomes work first passed through someone on your team's approval. Every sensitive action is recorded in an audit trail.

Configurable retention

Decide how long captured data is kept (from 7 days). An automated process purges anything beyond your policy — including the derived search vectors.

Your data is portable

Export everything from your company in an open format (JSON/CSV) whenever you want. No friction, no support tickets: it's your information.

Right to be forgotten

Permanently delete the data of a specific contact or your entire company — conversations, summaries, vectors, and history. Built to support your privacy obligations toward third parties.

Practices

The under-the-hood stuff counts too.

Encryption in transit: TLS on every connection: browser, channels, and integrations.
Managed infrastructure: AWS with a database on a private network, no direct public access.
Daily backups: Automated backups with rotating retention and restore drills.
Least privilege: The AI keys are ours (managed), not yours: you never expose your own credentials.
Sensitive-data masking: Card numbers and bank details are masked before being indexed for search.
Action auditing: Logins, plan changes, deletions: all traced with timestamp and IP.

Does your security team need more detail? Write to us at hello@thenodeharbor.com and we'll set up a review.

Try it with one project. Verify everything.

Export or delete your data whenever you want — during the trial too.

Start free Explore the platform

You trust us with your conversations.We don't take that lightly.