Encrypted connections
Taskify is delivered over Vercel-managed HTTPS, helping protect information while it travels between your browser and taskify.ca.
SECURITY AT TASKIFY
Your work stays yours.
Taskify uses clear access rules and trusted infrastructure to protect the work between the meetings—without making security feel like more work.
Last reviewed August 27, 2026
Calm on the surface.
Careful underneath.
These are the safeguards built into Taskify today. We describe them precisely so you can make an informed decision about the work you keep here.
Identity and data boundaries
Supabase Auth identifies signed-in users. Row Level Security policies help enforce which spaces, tasks, and records each user can access.
Private task files
Task attachments stay in private Supabase Storage. A download is authorized first, then opened with a short-lived signed URL.
Safer invitations
Share links use high-entropy tokens whose hashes—not the usable tokens—are stored. Invitations expire and acceptance is locked to the invited email address.
Server-only secrets
Sensitive provider credentials used by Taskify are read by server routes and are not embedded in the public browser application.
Purpose-limited AI
OpenAI receives relevant content only when you invoke Taskify's scanner, Smart Inbox, or AI assistant. Requests use store: false; scan images are not saved to Taskify Storage in that flow.
SHARED RESPONSIBILITY
Who protects what.
Secure software is a team effort. Taskify configures and connects specialist providers, while you stay in control of who you invite and what you share.
Vercel
Runs Taskify's web application and manages HTTPS certificates and edge delivery for taskify.ca.
Supabase
Provides managed authentication, database, and private file storage. Taskify remains responsible for its schema, access policies, and application logic.
OpenAI
Processes relevant content only when you choose the scanner, Smart Inbox, or AI assistant. Those API requests use store: false.
Taskify + you
Taskify builds and maintains the product controls. You protect your sign-in methods and decide which people receive access to a space or task.
A clear boundary: A provider's certification, audit, or compliance status applies to that provider and its covered services. It does not certify Taskify. Taskify does not currently claim SOC or ISO certification or an independent security audit.
RESPONSIBLE DISCLOSURE
Found something that does not look right?
Prepare a clear description, the steps needed to reproduce it, and the potential impact. Please protect other people's privacy, avoid destructive testing, and do not access accounts or data you do not own.