How tendry keeps your information safe

1.What tendry stores — and what it never does

tendry stores your organizational map: the systems you use, the people involved, who is responsible for what, how work gets done, and how it all connects.

tendry never stores passwords for your other systems

We never ask for, and you should never enter, logins or passwords for your donor database, bank, email or any other tool. tendry records that a system exists and who knows how to use it — not how to get into it.

tendry also isn't the place for donor records, medical information or personnel files. See our Privacy Policy for the full list.

2.Your organization's information stays separate

Every organization's information is kept apart from every other organization's. This is enforced by the database itself on every request, not just by the screens you see — so even a mistake in the app couldn't show your map to someone outside your organization.

Links between records are checked too: a person, system or flow can only be connected to other records in the same organization.

3.Encrypted while it travels and while it's stored

Everything sent between your browser and tendry travels over an encrypted connection (HTTPS). Your information is encrypted where it's stored, and backups are encrypted as well.

4.Who can see and change what

Inside your organization, roles decide what each person can do:

• Owners and Administrators can change organization settings, billing and exports.
• Team members can add and update systems, people, responsibilities and flows.
• Board members, advisors and read-only members can look, but not change anything.

Finished map versions can't be edited afterwards, so you always have an honest record of how things looked on a given day. Changes to your map are recorded in your organization's history.

5.Signing in

• Sign in with Google, so you can use the account security your Google account already has, including two-step verification.
• Or sign in with email and a password of at least 10 characters, mixing letters with numbers or symbols.
• New accounts confirm their email address before they can sign in.
• tendry never stores your password itself — only a one-way scrambled version that can't be turned back into the original.

6.Payments

Payments are handled by Stripe. Your card number goes straight to Stripe and never touches tendry. We only see whether your subscription is active.

7.Your information is yours

Owners and Administrators can download everything your organization has recorded, as one file, any time from Organization Settings. We never sell or share your information.

Cancelling doesn't erase what you've built. If you'd like your organization's information deleted, write to us and we'll do it.

8.How we check our own work

We run automated security checks on tendry's database rules and code, and fix what they find. Website addresses you give us are checked before tendry looks at them, so tendry can't be tricked into reaching private networks.

tendry doesn't hold certifications such as SOC 2 or HIPAA. Those require an outside audit, and we won't claim them until we have one.

9.Reporting a security problem

If you think you've found a security problem, please email support@gettendry.com with "Security" in the subject. We'll reply and keep you updated while we fix it.