Security & data

Built to earn the community's trust

You hold caregivers' details in trust for your community. Here is how Carrier Stash keeps that data isolated, encrypted, and under your control.

Per-tenant data isolation

Every account's records sit behind PostgreSQL Row-Level Security enforced at the database layer — not just in the app. Each library within your organization is isolated from every other organization. One library can never read or write another organization's carriers, caregivers, or loans.

Encrypted in transit and at rest

All traffic to Carrier Stash is served over HTTPS (TLS), so data is encrypted on its way to and from your browser. Your records are stored in managed PostgreSQL encrypted at rest, and automated backups carry the same encryption.

Caregiver details and retention

We store only what a carrier library needs to run: caregiver names, contact details, and waiver status. That data is used to operate your library and nothing else. We do not sell it or build advertising profiles, and we keep it only while your account is active or you ask us to.

Data processing agreement

If your organization needs a Data Processing Agreement before it stores caregiver data, we make one available on request. Ask through our contact page and we will send the current version along with our subprocessor list.

Your data, your control

The records you create belong to your organization, not to us. You can take them with you or remove them whenever you need to.

Export anytime: Export your inventory and loan history to CSV whenever you want, for a grant report, a board meeting, or your own records.
Delete on request: A caregiver record can be deleted when someone asks to be removed, and we delete your organization's data when you close your account, except where we have to keep something by law.
Role-based access: Admins, coordinators, and users each see what their role allows. Caregiver details are not exposed to roles that do not need them.

Subprocessors

We rely on a small set of trusted providers to run the service. Each one processes data only to deliver Carrier Stash to you.

SupabaseDatabase, authentication, and file storage
NetlifyWebsite and application hosting
StripePayment processing for paid plans
ResendTransactional email, such as account notices

Have a security question? Get in touch

Ask us anything about how your data is handled, request a DPA before you add caregiver records, or report a security concern. We read every message and respond quickly.