Security & privacy
Your clients’ data stays in the EU. And where it belongs.
NULLKA runs on Supabase in the eu-west-1 region in Ireland. Who sees what is decided by the database itself – not just the interface.
EU hosting
The database, files and sign-in run on Supabase in the eu-west-1 region in Ireland.
Row-level security
Every query passes PostgreSQL Row Level Security policies. Even if the interface made a mistake, the database would not hand over someone else’s data.
Roles and permissions
Owner, admin and member in the agency; admin, member and viewer on the client side. Each role sees and does only its own.
Internal items
Mark a task, doc or folder internal and the client won’t see it – not in lists, in search, or in the counts on cards.
Separate clients
Each client is a separate company. One client never sees another.
Encrypted connections
All traffic runs over HTTPS. Passwords are handled by Supabase Auth and never stored in readable form.
Who sees what
| Content | Agency | Client |
|---|---|---|
| Shared tasks, docs and files | Yes | Yes |
| Internal items and notes | Yes | No |
| Other clients’ spaces | Yes | No |
| Agency settings and members | Yes | No |
Work that ends at zero.
Start with one space for your tasks, docs and plan. Invite clients and teammates when you need them. Clients get access free.