ChronosCodex Trust Center
Last updated: June 24, 2026
Internal security reviews are published for transparency in our Audits section — these are internal engineering reviews, not independent third-party audits.
Agencies buying software need direct answers about storage, ownership, backups, exports, and deletion. ChronosCodex is designed so your agency owns its data, can export it, and can request account deletion with stored related files permanently removed under the deletion workflow.
Secure Offsite Document Storage
ChronosCodex uses Cloudflare R2 for encrypted offsite document storage. The CRM database stores document metadata, tenant relationships, household links, categories, permissions, and audit history. Cloudflare R2 stores the encrypted file objects.
PostgreSQL remains the source of truth for document identity, tenant ownership, household links, permissions, categories, retention, and audit history.
Binary files such as ID cards, applications, policy documents, 1095 forms, signed forms, and recordings are stored as file objects in Cloudflare R2.
Sensitive files are accessed through short-lived signed URLs after ChronosCodex verifies the user's CRM permissions.
Architecture
What This Means
- Documents are not stored directly in the CRM database.
- PostgreSQL remains the source of truth for metadata and relationships.
- Files are stored offsite in Cloudflare R2.
- Access is controlled by ChronosCodex permissions.
- Sensitive files are accessed through short-lived signed URLs.
- Signed links expire automatically.
- Storage keys are tenant-scoped.
- Deletions are handled safely through metadata first.
- This architecture supports future storage replication and backups.
Backups, Export, and Leaving
Database backups are performed daily and stored off server. Documents are stored offsite in Cloudflare R2, with a server-local operational backup copy maintained for recovery. Agencies can export and own their data. If an agency leaves, ChronosCodex can support export first, then account deletion so stored tenant records and related files are removed through the deletion workflow.
Storage FAQ
Where are documents stored?
Document metadata, relationships, permissions, and audit history are stored in PostgreSQL. File objects are stored offsite in Cloudflare R2.
Are files public?
No. Sensitive files are not served from a public bucket, and permanent R2 object URLs are not exposed to the browser.
Can users access files without CRM permission?
No. ChronosCodex checks the authenticated user's tenant and document permission before generating a temporary signed URL.
What happens when a document is deleted?
The CRM soft-deletes the metadata first, removing the document from normal views while preserving an audit trail. Hard deletion is handled through controlled administrative deletion policy.
Can documents be exported?
Yes. Agencies own their data and can export their records and documents. Export is the recommended first step before closing or deleting a workspace.
Why Cloudflare R2?
Cloudflare R2 gives ChronosCodex encrypted offsite object storage, S3-compatible tooling, durable storage keys scoped by tenant, and short-lived signed access links for private documents.
Security Contact
For privacy, export, deletion, backup, or security questions, contact [email protected].