Security

Security & Data Handling

Applies to portal.ruralexports.net and team.ruralexports.net. Last updated August 19, 2026.

Controlled-access workspaces

Rural Exports uses controlled-access client workspaces for project information, documents and communications. Access is authenticated and scoped according to the user's role, company and project responsibilities.

Client accounts are created by invitation from Rural Exports; the portal has no public sign-up. Client identity is verified at onboarding through a third-party document and photo check (Stripe Identity), and every signature or acknowledgment made in the portal is recorded against the signing person's authenticated login, the exact text signed, and the time.

Client data and files

Client data and files are not made publicly available through the portal. Files are held in private storage and delivered only through time-limited, authenticated links. Application credentials and integration secrets are maintained server-side rather than stored in client-facing pages.

Payment card and bank details are entered directly with our payment processor (Stripe) and are not received or stored by Rural Exports. Every charge to a payment method on file corresponds to a numbered invoice visible in the client's account.

Access controls

Rural Exports applies access controls so that clients, employees, coordinators and outside specialists receive only the information required for their assigned work. Access rules are enforced in the database itself, per record, rather than only in the pages that display them. Where a company has more than one person on an account, portal access, notifications, signing authority and payment authority are separate permissions granted individually.

Infrastructure

The portals are hosted on Cloudflare and use Supabase for authentication, database and file storage; both providers operate their own security programs and data is stored in the United States. Rural Exports' internal systems sit behind an additional identity gate that is separate from client and partner logins.

Regulated and controlled information

Projects involving regulated, export-controlled or government information may require additional handling requirements. Those requirements are established for the individual engagement before controlled information is accepted into the system.

Do not upload classified information, Controlled Unclassified Information (CUI), export-controlled technical data, or other specially restricted material unless Rural Exports has specifically confirmed the approved method for that project.

Reporting a concern

If you believe information has been accessed or handled incorrectly, or you notice something in the portal that does not look right, write to robynm@ruralexports.net with the subject line “Security”. We acknowledge reports and follow up directly.

This page describes current practice and is updated as it changes. It is not a certification and does not replace the terms of a signed engagement agreement or the portal Terms of Use & Privacy Notice.