New: StrayPaw AI is in every workspace. See how it works

Security

Records someone has to defend

Programme records are audited, queried and paid against. StrayPaw is built so every figure can be traced, every change has a name on it, and every limitation is visible.

Audit historyEvery change, who made it and when
Read-only
  • Dr. S. Rao authorised sterilisation · SP-1067
  • Anita (coordinator) marked SP-1042 and SP-1067 as different animals
  • StrayPaw AI → Anita follow-up prepared, confirmed by Anita
  • Ravi (field) created SP-1071 · operator-created
  • Import 2,188 rows · historical imported record

What we do not claim yet

Security claims are only useful if they are true. These are the ones we will not make until they are.

No certifications

StrayPaw holds no ISO 27001, SOC 2 or government empanelment today. We will say so in any procurement.

No India data residency guarantee

Our database is not hosted in an Indian region today. Ask us if your contract requires it.

No external audit yet

Controls are reviewed by the team that builds them. An independent review will be published when done.

Controls in the product today

Permissions in the database

Row-level security decides every read and write by organisation and role. Hiding a button is never the guard.

Organisation isolation

Each organisation's records are readable only by its own members. In pilots, a reviewer sees only the packages submitted to their office.

Invitation-only access

No self-chosen roles. An admin invites each member with their email and a one-time code.

Audit history

Status changes, notes, follow-ups and reviews are kept on the record with who did them and when.

Provenance

Imported, community-reported and operator-created records are labelled and never mixed up.

AI with your permissions

StrayPaw AI reads with the signed-in person's session and cannot save anything without their confirmation.

Privacy by default

Public views show areas, not exact locations. Reporter identity and veterinary notes stay private.

Exportable

Your registers, evidence and reports export to XLSX, CSV and PDF at any time.

Hosting

Managed Postgres on Supabase and the app on Vercel, both over TLS.

Report a vulnerability. Write to us through the contact page with the details. We reply, fix and credit you if you wish.

Ask us anything about how records are kept.

See how StrayPaw runs animal welfare programmes, starting with ABC and anti-rabies drives.