Trust centre

Security and data protection in Casily.

A summary of the controls that are built today, with links to the detailed legal pages.

EU data hosting

Application data is hosted in Lovable Cloud on AWS eu-west-1, Ireland. Meeting capture through Recall.ai is pinned to eu-central-1.

Authenticator-app two-step sign-in is available to every user, and workspace owners can require it for all members.

Every customer-data table has row-level security enabled and tenant isolation tests cover workspace boundaries.

Proof files and exports open through server-checked links that expire after five minutes.

AI-written output is labelled. Numbers and quotes are checked against source text before proof can leave Casily.

Permission scopes, expiry and withdrawal are enforced. Withdrawn public proof answers 410 Gone immediately.

Owners and admins can export the workspace audit log as a CSV after passing two-step sign-in.

Casily records once-per-day threshold alerts for exports, failed sign-in signals, mass changes and unusual public access.