Security

PlateHelix handles sensitive household and health information. Here is how we protect it.

Authentication

Email and password authentication with secure session management. Forgot-password and email verification flows protect against takeover.

Authorization

Row-level security policies scope every database read and write to your household. Adult-member privacy modes prevent exposure of detailed health data to other household members.

Data at rest

Documents are stored in private object storage. Database access requires authenticated sessions. Service-role credentials never leave the server runtime.

Data in transit

All client/server traffic uses TLS.

Logging

Sensitive values — raw lab numbers, document contents, chat content — are never written to operational logs. We log only job IDs, statuses, providers, token counts, and redacted metadata.

AI processing

AI calls are made server-side using configured providers. API keys remain on the server. We send only the context required to fulfill each request.

Reporting an issue

If you find a security issue, please contact us privately rather than disclosing publicly.

Last updated May 13, 2026.