Security overview
Security
LeadDrive is built for commercial workflows, so we treat account protection and safe defaults as product requirements—not optional add-ons.
Infrastructure
LeadDrive is deployed as a managed web service on Render. Background work runs through managed worker/queue infrastructure, with production health checks used to monitor service availability.
Database
Application data is stored in Supabase Postgres. User records, runs, and exports are tied to account/workspace ownership in the application.
Redis and queues
Upstash Redis is used for Redis-backed rate limiting and queue-related infrastructure where configured.
Payments
Payments are processed by Stripe. LeadDrive never stores full card details; we keep subscription and billing metadata needed to manage plans.
Authentication
Accounts use email/password sign-in, protected sessions, and password reset links delivered to the account email where email delivery is configured.
Monitoring
Application errors are monitored with Sentry where configured. Health endpoints and uptime monitoring can be used to detect production issues.
Data isolation
Users should only access their own workspace data. Protected dashboard routes and API checks are designed around account-level ownership.
Exports
Users control when exports are created. Exports are generated from completed runs and should be handled according to privacy and marketing laws.
Backups
Managed database backups and provider retention controls should be used for recovery. Local filesystem writes are not treated as durable storage.
Data deletion
Users can contact support@leaddrive.uk to request account or data deletion, subject to billing, security, and legal retention requirements.
Early access limits
LeadDrive does not claim SOC 2, enterprise compliance certifications, or guaranteed uptime. Security practices will mature with the product.
Questions about security?
If you need a specific answer for a client security review (data retention, access, exports, or billing), send us a note at support@leaddrive.uk and we’ll reply with practical details.
Security FAQ
Is payment information stored by LeadDrive?
No full card details are stored by LeadDrive. Payments are handled by Stripe, and LeadDrive stores only the billing metadata needed to manage subscriptions.
Is LeadDrive SOC 2 certified?
No. LeadDrive does not currently claim SOC 2, enterprise compliance certifications, or guaranteed uptime.
Can I request data deletion?
Yes. Contact support@leaddrive.uk to request account or data deletion, subject to billing, security, and legal retention requirements.
Where is application data stored?
Application data is stored in Supabase Postgres, with account/workspace ownership checks used by the application.
How do I contact security or support?
Email support@leaddrive.uk with security, account, billing, or data deletion questions.