Skip to main content
foreman ai

Legal

Security

Last updated July 6, 2026

Foreman AI handles your contacts, calls, and business data, and protecting it matters to us. Here is how the platform is built and what you control.

This document is a starting template provided for transparency. It is not legal advice. Please consult a qualified attorney to tailor it to your business and jurisdiction.

Infrastructure

Foreman runs on managed cloud infrastructure — Vercel for the application and Supabase / PostgreSQL for data. All traffic is served over HTTPS/TLS.

Workspace isolation

Each workspace is separated at the database level with row-level security, so one business cannot read another business’s contacts, calls, or records.

Authentication

Accounts use secure sign-in with optional two-factor authentication. You control who you invite into your workspace and what they can access.

Payments

Billing is handled by Stripe. We do not store your full card number on our servers.

Your data and your controls

You own the data you put into Foreman. You can export it, and business customers can request our Data Processing Addendum. See the Privacy Policy for how we handle personal data.

Reporting a vulnerability

Found a security issue? Email security@foremanbooks.com and we will respond promptly. Please give us a reasonable chance to fix it before any public disclosure.