Security
How your pet’s records are protected.
A vaccination record is health data, and a share link is a key to it. Here is what PawPass does with both, in plain terms.
Sign-in is handled by Clerk
Passwords and sign-in sessions are managed by Clerk, a dedicated authentication provider. PawPass never stores or sees your password. Sign in with a password or with Google.
Every request is checked against the pet
Before any record is read or written, the server checks that the signed-in person owns that pet or has been invited to its household. A record is never reachable by guessing an ID.
Encrypted in transit and at rest
Records live in a Postgres database hosted by Supabase, encrypted at rest. Every connection to PawPass uses TLS. The database keys are held on the server and never sent to the browser.
Attachments are private
Certificates and PDFs you attach are stored in a private bucket, namespaced to your account and pet. They are served through short-lived signed links, not public URLs.
Share links are scoped, time-limited and revocable
A share link is an unguessable token that expires on the date you set. You can revoke it at any moment and see how many times it has been opened. Lookups are rate-limited, and shared pages tell search engines not to index them.
No analytics on your records
Page analytics run on the public marketing pages only. They are never loaded on the signed-in app, on shared record pages, or during sign-up, so nothing about your pet reaches a third party.
Delete everything, any time
Deleting your account removes your sign-in and stops every reminder. There is no retention period you have to wait out and no one to email first.
What we never do
Sell your data. Aggregate it. Share it with advertisers. Train AI on your pet’s record without your explicit opt-in. The privacy policy says the same thing at greater length.
What we have not done yet
PawPass has not been through a third-party security audit or a SOC 2 assessment. We are a small team and will say so here when that changes, rather than imply it beforehand.
Found something?
If you think you have found a security problem, email support@pawpass.live with the details. We read every message and will reply to you directly.
Keep reading
Related pages.
Try it
Start your pet's record.
Free for your first pet. No card, and nothing about your pet is sold or shared.
Free forever · no card required · we never sell your data