Data protection
How your data is protected
This demo stores only synthetic data. The architecture below is what ships for paying customers — shown in full so you can judge it before trusting it with real numbers.
This demo uses synthetic data only; the encryption architecture shown here is what we build for paying customers.
Data flow
Client-side encryption
Your KPIs are encrypted in your browser with AES-GCM before anything is sent. The key is derived from a secret only you hold; our servers store ciphertext they cannot read.
Zero-knowledge benchmarking
Benchmarks are computed against pre-aggregated peer distributions, so your plant is positioned without your raw values ever being decrypted server-side.
No shared identities
Row-level security isolates every account. Peers are never named; you see distributions, never another company's numbers.