Is my data secure?

Yes. Data is hosted on Supabase (Postgres) with row-level security on every table, authentication is handled by Supabase Auth, and payments are processed by PCI-compliant Stripe. Report files are stored in private cloud storage.