How we keep your proposals safe

What protects your proposals, your clients' details and every signature, in plain words.

Built to protect your business

Every layer of PropoBox is designed with your security and privacy in mind.

Encrypted in transit and at rest

Every page and request runs over HTTPS, and the database encrypts what it stores with AES-256. PropoBox runs on Vercel and Supabase, in Amazon Web Services data centres.

Access controls

Role-based access ensures team members only see what they need. Proposal links can be deleted or set to expire on a chosen date.

Each account kept apart

Row-level security in the database limits every account to its own proposals and clients, and its team's. No other account can read them.

Signature record you can check

Every signature is kept with the signer's consent, the time, IP address and browser, and a SHA-256 fingerprint of what was accepted, including your agreement if you attached one. Signed records are locked, and the fingerprint is checked again whenever the signed proposal or its PDF is opened.

Signed document storage

Completed and signed proposals are stored securely and remain accessible for as long as your account is active, per our data retention policy. An agreement you upload as a PDF is checked and rewritten as a clean file before it is stored, kept in private storage, and opened only through PropoBox pages that check its fingerprint on every read. Encrypted files and files with scripts are refused.

Connected apps on your terms

An app such as Claude gets access only after you approve it on a PropoBox page, follows your plan and team permissions, and loses access the moment you remove it under Settings.

How we work

The habits behind the features above.

Security reviews of the code and the database rules
Sign-in through Supabase Auth; PropoBox never stores passwords in plain text
Rate limits on public links, signing and sign-in
No advertising, and no selling of data

Responsible disclosure

If you discover a security vulnerability in PropoBox, we ask that you report it responsibly. Please email us at hello@propobox.com with the details. We commit to responding within 48 hours and working with you to resolve the issue.

Please do not publicly disclose vulnerabilities before we have had a chance to address them. We appreciate the security community's help in keeping PropoBox safe for all users.

Your proposals, kept private and secure.

Start sending professional, secure proposals with confidence.

Free plan · No credit card · 14 days of Pro