Encryption
Data in transit is protected with TLS. Data at rest is encrypted by our cloud database provider. Passwords are stored using industry-standard hashing. We never store plaintext credentials.
Security
How we protect commission, customer, and payroll data for field sales organizations.
Authentication
Secure login with encrypted password storage. Sessions are managed through our auth provider so credentials are never handled in application code beyond the sign-in flow.
Row-level security (RLS)
Access rules are enforced in the database. Reps only query their own records. Managers and admins see the scope their role allows. UI restrictions alone are not the security boundary.
Role-based access
Accounts are scoped by role (rep, manager, admin). Permissions control who can view commissions, edit pay scales, import vendor data, and run payroll exports.
Data ownership
Your company owns its sales, customer, and commission data in SalesTRKR. We process it to provide the product. We don't sell it.
Infrastructure
SalesTRKR runs on managed cloud infrastructure with row-level security at the database layer. Access to production systems is limited to authorized operators.
Backups
Database backups are handled by our cloud provider as part of the managed Postgres service, so recovery options exist if data needs to be restored.
Deletion policy
You can request account and data deletion. On a verified request we remove or anonymize personal data consistent with our Privacy Policy and any legal retention requirements.
Compliance posture
We design for privacy first and only publish security claims we can substantiate today. For reviews, DPAs, or questionnaires, contact us and we'll share what applies to your evaluation.
Questions?
For security reviews, DPAs, or deletion requests, reach out and we'll respond with what we can substantiate today. We don't publish claims we can't back up.