Security basics for administrators
Topic: Billing & Security
3 minReadingVideo · coming soon
In this lesson you learn
Who can see what, how data is stored and encrypted, and what to turn on first as a new Company Admin.
This article is a practical checklist. The full security overview lives at /security.
What to set up on day one
- Pick a strong password and save it in a password manager. Do not reuse one from another system.
- Invite only the people who actually need access. Use scoped roles — do not make everyone a Company Admin.
- Review the users list every quarter. Remove people who have changed roles or left.
- If you use the API, keep API keys in a secret manager. Never paste them into Slack or email.
Where your data lives
Database and file storage: Supabase, hosted on AWS in Canada (Montréal, ca-central-1). Application hosting: Vercel, backed by AWS. Data in transit uses TLS 1.2+. Data at rest uses AES-256.
Getting a DPA or subprocessor list
Email security@dovamfg.com — we respond within two business days.
Need more help?
Contact customer support with your question. We reply within one business day.
contact@dovamfg.comRelated lessons