Our approach

Security is built into the platform, not bolted on. UrbanOS runs on enterprise infrastructure with tenant isolation enforced at the database, so one organization can never see another's data.

Data protection

All data is encrypted in transit (TLS) and at rest. Row-Level Security isolates every organization; access is verified on every request. We hold to least-privilege access internally.

Authentication

Sign in with Google, Microsoft, email + password, or a magic link. Sessions are protected with secure, HTTP-only cookies. Sensitive keys never reach the browser.

Infrastructure

We build on Supabase and Vercel — SOC 2-aligned providers with automated backups, monitoring, and DDoS protection. Payments are handled by Stripe; we never store card numbers.

Responsible disclosure

Found a vulnerability? Email kevin@urbanailabs.com with the details and we will respond promptly. We appreciate good-faith research.

Questions? Email kevin@urbanailabs.com.