Security & data

1. Where your data lives

AbelEdge runs on infrastructure in the United States: the application and its database on Railway, files and published pages on Cloudflare. The database is backed up automatically by its host. The full list of every company that touches customer data, with what each one sees, is the Subprocessors page; it is dated, and a new entry is added there before that company handles a record.

2. How it is protected

• In transit — TLS on every connection: browser to AbelEdge, AbelEdge to every provider.
• At rest — the database and file storage are encrypted by the hosting providers; tokens for the accounts you connect (Google, Meta, email) are encrypted again at the application level before they are stored.
• Payments — card details never reach us. Stripe holds them; we keep the last four digits and the billing name.
• Backups — automatic, encrypted at rest by the host; deleted data leaves them when the host’s retention runs out.

3. Who can reach it

• Your staff — access is per module, enforced on the server, not just hidden in the menu. A person given Tasks sees tasks and nothing else; the owner sets this and only the owner changes it.
• Two-factor authentication — available for every account and recommended for owners and admins; an authenticator app, no SMS.
• Sessions — server-side, revocable; signing out on one device ends that session only, and an owner can end every session for an account.
• Our staff — reach customer data only for support you asked for or a fault we are fixing, and only through the platform’s own admin tools, never a direct database login.
• Between customers — every record is scoped to the account that owns it, at the query, on every route. No customer can read another’s data through any screen or API.

4. What Kala and the AI providers see

Kala’s checks run on your records inside AbelEdge. When a check needs a language model, the request carries the records that check reads and nothing more, to OpenAI, Anthropic or Google under their business terms, which do not permit training on what we send. Findings are written back onto the record they concern, with the rows that were read attached, so every one of them can be audited. On Enterprise plans a single named provider can be arranged.

5. Connected accounts

Google Ads, Analytics, Search Console, Meta pages and ad accounts, WhatsApp and email are connected with your permission, for the feature you connected them for, and can be disconnected at any time from inside AbelEdge or from the platform. Disconnecting deletes the stored token. Anything that moves money on a connected account — a bid, a budget, a paused campaign — happens only inside the ceilings and approvals you configured. Nothing spends on its own.

6. Availability and change

Maintenance is scheduled outside most customers’ business hours and announced where we can. Every change to the platform passes automated tests and a browser round before it is deployed, and anything touching money, access or customer data an independent audit as well; a change that fails does not ship. If AbelEdge is ever discontinued you get ninety days’ notice with export working throughout.

7. Your data is yours

Export at any time in CSV, PDF and Word, depending on the record. After cancellation your data is not deleted on its own: export what you need, and when you ask us to delete the account we do it and tell you the date it was done. We do not sell data, use it to market to your clients, or share it between customers. Details: Privacy Policy, Refund & Cancellation.

8. Incidents

If we discover a breach affecting your data we tell you within seventy-two hours of confirming it: what was affected, what we did, what you should do. To report a security fault, email info@abelops.com before telling anyone else; good-faith research within the Acceptable Use Policy is welcome and will not be acted against.

9. What we will sign

• A data-processing agreement in our standard form, on request, for any plan.
• Standard contractual clauses for EU and UK customers, through the DPA.
• A security questionnaire — send yours and we answer it in writing.

We do not currently hold SOC 2 or ISO 27001 certification and do not claim to. If your procurement requires one, tell us; it is on the roadmap and your requirement moves it.

10. Contact

BRAIN TECH SOLUTIONS · 30 N Gould St #56753, Sheridan, WY 82801, USA · info@abelops.com · +1 (307) 449-2558