How your data is stored and protected

Each Verbial workspace runs in its own Postgres database with daily snapshots, logical backups, Google-only sign-in, and an audit log.

This article explains the storage, backup, sign-in, and audit model so you can answer a client's security questionnaire from one page. The legal entity behind Verbial is CB Platforms LLC. More detail is at /security.

Storage

Dedicated database. Your workspace has its own Postgres database, created when you verified your signup. Nothing is shared with other customers at the table level.
Routing by hostname. Every address that reaches your workspace, the primary subdomain, custom app domains, and brand domains, is registered to your workspace alone.
Secrets. OAuth tokens for connected services and API token hashes are encrypted at rest and excluded from exports.

Backups and restore points

Go to Settings, then Account & billing, then Data.
Under Restore points, see when each snapshot was taken and how long it is kept.
If something goes badly wrong, contact support and name the restore point you want. A fresh snapshot is taken before any restore.

Snapshots run daily and on demand. Logical dumps run separately as a second restore path. Point-in-time history covers the last 7 days.

Google sign-in only. There are no passwords to leak or reset.
Identity is bound to the Google account id on first sign-in, not the email string.
Optional allowed-domain list for first sign-in.
Archiving or deactivating a user ends their access, including any personal API tokens.
Admin impersonation for support is logged, and sensitive actions such as minting tokens or running setup are refused under an impersonated session.

Audit log

Every meaningful change is logged: time entry edits, budget and allocation changes, role updates, invoice edits, payments, rate changes, imports and rollbacks, token creation, and API calls made through personal tokens.

Go to Help & records, then Audit log.
Filter by action, entity, user, or date.
Click a row for the before and after diff.

Non-admins can read the audit log only for proposals they own. Cost changes on service items are redacted for anyone without the cost capability.

What to check

Privacy mode (the eye icon in the top bar) blurs every amount on your screen for demos. It is a display setting, not a permission.
Export and deletion are covered in Export all workspace data and Delete your workspace.

Questions

Is my data in a shared database?

No. Every workspace is provisioned its own Postgres database. Requests are routed to it by hostname, and the hostname index is what keeps one customer from ever serving another's data.

How long are snapshots kept?

Daily snapshots are kept for 7 days and weekly snapshots for 4 weeks by default, plus 7 days of point-in-time history. A snapshot is taken before every migration and before a deletion request.

Who can read the audit log?

Admins, at Help & records, then Audit log. Scale and Enterprise plans can export it.