Security worth
showing IT.
Encryption, isolation, audit logs. Every send logged. You can pause Alfred or require approval anytime.
How Alfred protects your data
Six commitments
that aren’t theater.
We’re not going to pretend we’re Fort Knox. We’re an early-stage product. But here’s what we actually do — written without compliance buzzwords.
Managed Postgres hosting
Postgres on AWS US-East, managed by Supabase (SOC 2 Type 2 audited). Encrypted at rest and in transit.
Encrypted in transit and at rest
TLS 1.2+ in transit. AES-256 at rest. No exceptions.
Per-org data isolation
Postgres row-level security. Other businesses cannot see your data. Period.
You stay in control
Review-before-send is on by default — read every message, edit it, then approve. Pause Alfred anytime. Every send, and every send Alfred held, is logged with the reason.
You own your data
Export your contacts and revenue data as CSV any time. Delete your account and we purge immediately.
Audit-ready logging
Every send, hold, and approval decision logged with its reason, for the life of your account.
An honest note
We’re an early-stage company. We don’t have SOC 2 Type II yet (it’s on the 2026 roadmap). We don’t have ISO 27001. We can’t honestly claim a 99.99% SLA — we’re building toward 99.9%.
What we do have: encryption at rest and in transit, per-org data isolation, a full audit trail, and an approval queue that means nothing autonomous goes out without you tapping approve.
If your compliance team needs more, email hello@alfred-intelligence.com and we’ll send our security posture documentation under NDA, walk through your specific requirements, and tell you honestly whether we’re ready for your environment.
Frequently asked
Specifics, not slogans.
Trust is the product.
Try Alfred risk-free.
Free to start. No card. No pressure. If we’re not the right fit for your compliance posture, we’ll tell you ourselves.