Enterprise-grade security. Transparent by design.
Max Data runs on independently audited infrastructure, with layered controls and clear, honest limits on what we claim.
This page says exactly where your data lives, who audits that infrastructure, and which controls we run ourselves. No badge here belongs to us that we did not earn.
Last updated: August 2026.
Who audits the infrastructure Max Data runs on?
Max Data is built on Supabase and Vercel. Both providers hold current ISO 27001 and SOC 2 Type II attestations, examined by independent third parties, and both publish their reports and controls for review.
Supabase
Database & auth
Independent attestations
- ISO/IEC 27001:2022
- SOC 2 Type II
Max Data does not itself hold ISO 27001 or SOC 2 certification. These certifications belong to the respective service providers, and are shown here so you can see who audits the platform underneath us.
What does Max Data do on top of that?
Certified infrastructure is the floor, not the ceiling. These are the controls we run ourselves, and every one of them is in force today.
Encryption in transit
Every connection to Max Data is served over TLS. There is no unencrypted path to the application or the database.
Encryption at rest
Stored data is encrypted at rest by the managed database platform, using keys we never handle directly.
No public database access
The database is not open for public reads or writes. Forms submit to server-side endpoints, and client code never holds a key that can read your records.
Least-privilege access
Access to production data is limited to the people who need it to run the service, and scoped to what each role actually requires.
Automated backups
The managed database platform takes automated backups with point-in-time recovery, so a bad day is a restore rather than a loss.
Thailand PDPA practices
We collect only what we need, use it only for the purpose you gave it for, and delete it on request. Our data handling follows Thailand's PDPA.
What happens to the data you give us?
Very little of it, deliberately. Max Data is a company-intelligence platform built on public filings, not a place to park your customer list.
Access is by application. The form asks for your name, work email, company, and what you want to do, and nothing else.
Applications are stored in our database, which is not open for public reads or writes, and kept only as long as we need them to review your request and set up your account.
We do not sell your data and we do not send marketing spam.
You can ask to see, correct, or delete anything you submitted, at any time.
Found a security issue?
Tell us and we will act on it. We would much rather hear it from you than read about it later.
Reach us on LINE at @maxsolutions with the keyword MAX DATA, and say it is a security report so it gets to the right person quickly. We aim to acknowledge within one business day.
Report on LINEWant the detail behind any of this?
If your security team needs specifics before you can bring Max Data in, ask. We will answer directly, in writing, and we will tell you plainly when the answer is no.
We work with a selected group of teams.
Access is by application, and we review every one. Tell us what you want to do and we will be in touch quickly.
Talk on LINE: @maxsolutions, keyword "MAX DATA"