We take the security of your data seriously. Learn how Think Mission protects your organization's information with modern, enterprise-grade security practices.
Think Mission is built for mission-driven organizations who need to protect sensitive donor information, constituent data, and organizational communications. We understand that trust is earned, which is why we've built our platform on a foundation of security-first design principles and partner with industry-leading infrastructure providers.
Our platform leverages the security investments of Supabase (database and authentication), Vercel (frontend hosting), and Railway (backend services) - each providing enterprise-grade security controls that would be prohibitively expensive for us to build independently.
Security measures built into every layer of Think Mission
All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. Your data is never stored or transmitted in plain text.
Row Level Security (RLS) policies ensure each organization can only access their own data. Your data is logically separated from other organizations at the database level.
Powered by Supabase Auth with support for email/password, magic links, and social OAuth providers. JWT tokens with short expiration times protect your sessions.
OAuth tokens for connected social media accounts are encrypted using Fernet symmetric encryption before being stored in our database.
Supabase provides daily automated database backups with point-in-time recovery, ensuring your data can be restored if needed.
All user inputs are validated and sanitized using Pydantic models to prevent SQL injection, XSS, and other common vulnerabilities.
We partner with industry-leading cloud providers who maintain rigorous security certifications
Database & Authentication
Frontend Hosting
Backend Services
Our commitment to meeting industry standards
Clear, transparent policies that explain how we handle your data
Our data practices align with major privacy regulations including data subject rights and consent management
Working toward our own SOC 2 certification to formalize our security controls
We value the security research community. If you discover a security vulnerability in Think Mission, please report it to us responsibly. We commit to:
Report vulnerabilities to: security@thinkmission.ai
We're happy to discuss our security practices in more detail or answer specific questions about how we protect your data.