Security

Your clients trust you. You can trust this.

Separate workspaces, private-by-default files, access by role, and payments that never touch our servers. Boring, reliable defaults, so your client work stays yours.

Who sees what

Same record. Four very different views.

Switch the role and watch the record redact itself. Your client gets a calm view of progress and invoices. Your costs, margins, and notes never leave your side.

View as
Atlas rebrand · engagement record4 / 8 fields visible
ProjectAtlas rebrand
Milestone 2Approved
Invoice #1043$1,087.50 · Paid
Shared filefinal-logo-pack.zip
Labour cost███████
Project margin██████
Internal note████████████████████████
Other client work████████████████████████

Sees only what you shared. Costs, margins, notes, and other clients stay hidden.

How your data is protected

Ten checks. Plain English, no jargon.

0/10Running checks…
  1. Check 01 · Pending

    Your workspace stays separate.

    Your people work in their own workspace. People from another organisation cannot see your records.

  2. Check 02 · Pending

    Files are private by default.

    You decide which client or project can access each document, and shared links expire automatically.

  3. Check 03 · Pending

    Sign in with Google. No passwords to leak.

    Rellby does not ask you to create or share a separate password.

  4. Check 04 · Pending

    The right access for each person.

    Owners, administrators, team members, and clients each see what their role needs. Clients only see the work you share.

  5. Check 05 · Pending

    Rellby never sees card details.

    Stripe and Razorpay handle checkout directly, and a payment is recorded only after confirmation.

  6. Check 06 · Pending

    Repeated payment notices are safe.

    If a provider sends the same confirmation twice, it's processed once, so invoices are never updated twice.

  7. Check 07 · Pending

    Recurring cycles never duplicate invoices.

    Repeated billing updates are processed only once, so your books stay accurate.

  8. Check 08 · Pending

    Guardrails against misuse.

    Sign-in, invitations, document sharing, payments, imports, and exports all have safeguards against abuse.

  9. Check 09 · Pending

    Protected in storage and in transit.

    Your information is protected when stored and when sent between your browser, Rellby, and payment providers.

  10. Check 10 · Pending

    Boring, reliable operations.

    Backups for recovery, changes reviewed before release, and investigations that avoid unnecessary personal data.

Who touches your data

Six providers. All of them named.

Supabase

Sign-in and data storage

United States
Cloudflare R2

Document storage

Global · nearest edge
Vercel

Website hosting

US / Europe · edge
Stripe

International payments

US / Europe
Razorpay

Payments in India

India
OneSignal

Browser push, opt-in only

United States

These providers hold their own independent attestations. Rellby does not claim SOC 2, HIPAA, or GDPR certification for the service itself. See the current sub-processors list.

Your part

Security is shared. Four habits do most of it.

Tick them off as you go. Two take less than a minute.

0 of 4 habits
Email support24 hresponse target
Critical · data or security4 hresponse target
Status pageLivestatus.rellby.in

Run client work with nothing to hide from.

Try it with real client data. 14-day trial, no card. Found something off? security@rellby.in gets top priority.