Information security
Where the data is kept
Recordings, text and the book are stored with Supabase, on servers in Germany, encrypted in transit and at rest.
Who can reach it
- Family members see only the book they are invited to, and only approved chapters.
- Database access is denied by default; every read goes through services that check permission.
- The staff console requires two-factor sign-in, and every action in it is logged.
Certifications
The operating company, Entrypoint Systems, is certified to ISO/IEC 27001 and ISO 9001. These apply to the company; the Sipur Chayim service does not yet have a separate certification.
Reporting a security issue
Write to admin@storyechoes.com.