Your company’s records stay your company’s.
Your project records are business records. Data is hosted in the EU, every row is scoped to your company at the database, files sit in private buckets, and the AI copilot never writes without a person confirming. This page is the plain-language version of how that works; the privacy policy is the legal one.
Where the data lives and who can touch it.
- Hosting
- Supabase on AWS in Ireland (eu-west-1): Postgres database, authentication, file storage and serverless functions. Drawing processing runs on Railway workers; the website is served by Vercel.
- Isolation
- Every table is scoped to a company by Postgres row-level security, and every write passes a permission guard in the database. The isolation suite runs 402 assertions across all six roles - permission matrix, storage paths, config surfaces and cross-tenant attempts - including 29 driven end-to-end through the API as a signed-in user. Zero failures when it was last run in full (July 2026); it is re-run against the schema by hand rather than on every change.
- Files
- Documents, source drawings, photos and message attachments live in private buckets: every download is authorised per request. The rendered drawing tiles the viewer streams are served from a CDN path namespaced by three unguessable identifiers, so panning a drawing stays fast and works offline; that trade-off is reviewed with each customer who asks.
- Transport
- HTTPS everywhere. Android App Links for getkonverge.com are verified against the app’s signing certificate.
- Sign-in
- Phone number and a one-time SMS code. No passwords to leak. On the device, a biometric or PIN app lock re-arms every time you return to the app, separately from the session, so re-entry never costs a code.
- On device
- Local caches and queued records are stored in encrypted key-value storage whose key is generated per install and held in the Android Keystore. It is never bundled with the app.
- Permissions
- Six roles and per-member permission flags control screens, actions and, separately, whether money is visible. Permission changes reach phones in real time.
- Audit
- Document changes, workflow steps and every confirmed AI action are written to an audit log that belongs to the company.
The AI copilot and your data.
The copilot is powered by Google Gemini, called from our servers. No model key, prompt or vendor lives inside the app. When a person uses it, the text, photo or voice clip they submit plus the project records needed to answer are sent to Google under API terms that do not use the content to train models.
The copilot never writes on its own. It proposes drafts; a person confirms; the write runs through the same permission-checked, audited code path as the manual screens. Destructive actions need a red, single-item confirmation. Company and account deletion are excluded from the copilot entirely.
Each person is asked for consent in the app before the first use, and the company can switch AI features off for everyone.
Subprocessors
| Provider | Purpose | Location |
|---|---|---|
| Supabase (on AWS) | Database, authentication, file storage, serverless functions | EU (Ireland, eu-west-1) |
| Google (Gemini API) | AI copilot: text, vision and voice processing | Google Cloud (global) |
| Twilio | SMS sign-in codes | US/EU |
| Google Firebase | Push notifications (FCM) and app analytics (screen views, feature usage) | Global |
| OpenStreetMap / Nominatim | Reverse geocoding: turning photo coordinates into a place name (proxied; only coordinates are sent) | EU |
| Sentry | Crash and performance reporting | US/EU |
| Railway | Drawing and PDF processing workers | US/EU |
| Vercel | Serving this website (getkonverge.com) | Global edge network |
Transfers outside the UK/EEA rely on the UK International Data Transfer Addendum / EU Standard Contractual Clauses or an adequacy decision. Full detail in the privacy policy.
Deletion, export and leaving.
- Your account
- Delete it from Settings → Account, or by email if you cannot reach the app. Live data goes immediately; backups roll off within 30 days; crash diagnostics within 90.
- Your company
- Owners can export their workspace and close it. Business records created by a member who leaves stay with the company as its statutory record.
- Reporting
- Report a message, photo, document, AI response or user from where you see it; owners review reports in a moderation inbox and can block users per company.
What we don’t claim.
Konverge is in closed beta. We hold no security certifications, publish no uptime guarantee, and run no status page yet. Incidents are communicated by an in-app banner and by email to workspace owners. Changes to the live system are versioned and backed up daily. We would rather say that plainly than imply otherwise.
Found something? Email support@getkonverge.com with “security” in the subject and we will reply the next business day.
Questions from the person who signs.
Is Konverge ISO 27001 or SOC 2 certified?
No. Konverge is in closed beta and holds no certifications. This page describes the controls in place; it does not claim a certification we do not have.
Can Konverge staff read our project data?
Support access is by request and is logged. Automated processing (tile generation, search indexing, AI requests) runs server-side under your company’s permissions.
Is our data sent to an AI provider?
Only when a person uses the copilot, and only the message, photo or voice clip they submit plus the project records needed to answer. Google Gemini processes it under API terms that do not train on your content. Consent is asked in the app before first use and your company can switch AI features off.
Where are backups kept?
Encrypted backups are taken daily by our database host in the same EU region. Deleted data rolls off them within 30 days.
Will you sign a data processing agreement?
Yes, on request, from Band 2 plans and for pilots that need one. The subprocessor list on this page and in the privacy policy is the schedule it references.
Closed beta. Three to five contractors, starting now.
We’re putting Konverge on real sites before we put it on the store. Pilots run six to eight weeks on Android, free, with a permanent founding-customer discount afterwards.
Ask about the pilotinfo@getkonverge.com · reply next business day