How we keep your records secure.

Your company’s sessions are signed with its own key, so a session from another company is rejected. Without signing in, no one can read or change any table in your database. None of your files are public, and downloads use signed links that expire.

Our web apps, sign-in service, database API and sync accept only TLS 1.2 and 1.3. Your database and files are encrypted at rest with AES-256 by our database provider, Supabase.

You sign in with a single-use six-digit code sent to your email. There are two roles, admin and member, and only an admin can make someone an admin.

Outside your company, a shared report or invoice opens only for the email addresses you name, after they enter a single-use code we send them. Every link expires and can be revoked at any time. Nobody you share records with gets credentials to your database.

The app has no advertising, analytics, crash-reporting or tracking code, and never asks for your location. Its offline copy of your records is protected by iOS Data Protection and left out of iCloud and computer backups. Voice search and scale-display scanning are processed on the device.

Your database, sign-in, files and sync are hosted in AWS’s Sydney region, and our web app servers run in Vercel’s Sydney region. Each database is backed up daily, and backups are kept for 7 days. We check every feedlot’s database, sync and file storage every five minutes, and show the results on our public status page.

You own the records you put into PaddockPath. We don’t sell them, and we don’t use them to train AI models. You can export CSV files from the web app’s main screens at any time, and we’ll provide a full database export on request.

To report a security problem, email security@paddockpath.com

For any other question about security, email hello@paddockpath.com