Security at Equipoise AI
Equipoise AI · Last updated 14 September 2026 · Contact: support@equipoise.earth
Equipoise AI holds sustainability data for many organisations, so isolation between organisations is the foundation of our security model — enforced in the infrastructure, not just in application code. These are the concrete controls we run today.
Organisation isolation
- Every organisation’s data is fenced by row-level security inside the database itself: the database refuses to return another organisation’s rows even if application code were to omit a filter.
- The application connects with a restricted database role that has no access to sensitive tables beyond its per-organisation fence; administrative operations use a separate credential.
- Automated tests verify on every code change that every table the application can reach is fenced, in both directions, and that isolation survives connection reuse.
Release controls
- No change reaches production without passing an automated gate: type checks, linting, over a hundred database and isolation tests, and browser tests that use the product the way a person does. The gate is enforced by branch protection — it cannot be skipped.
- Changes are reviewed adversarially before merge, with security-relevant behaviour re-verified each round.
Data protection
- Data is encrypted in transit (TLS) and at rest.
- Application and database hosting run in EU regions (Frankfurt); see our sub-processor list for every third party and its region.
- AI features run under commercial API terms — customer data is not used to train models.
- Point-in-time database recovery and weekly file-storage backups, with restore instructions maintained off-platform.
Access control
- Administrative access requires two-step verification, is limited to named staff, and is logged in an audit trail.
- Platform access is invitation-based; account authentication is handled by a dedicated provider (Clerk) — we never store passwords ourselves.
Reporting a concern
If you believe you have found a security issue, contact support@equipoise.earth and we will respond promptly. Please do not test against other organisations’ data.