Security
Your records stay yours.
What protects your accounts and data, and which parts are built today and which are still coming.
Passwords
Stored only as Argon2id hashes. Sessions use HttpOnly cookies, and five failed sign-ins in 15 minutes pauses the account.
In the app nowOne organization never sees another
Row-level security in the database, so one organization's rows are kept apart from every other's at the database level.
In the app nowGoogle sign-in
On the website and in the desktop app. In the app, sign-in happens in your own browser, never inside the app window.
In the app nowTwo-step sign-in
Authenticator code plus recovery codes, required for owners and administrators. Built; switched on before launch.
In previewEncrypted offline copy
Changes made offline wait in an encrypted copy on your machine, unlocked by your passphrase, and sync when you reconnect.
In the app nowNo card numbers
Checkout goes to the payment provider, and only the provider's signed notice marks a payment paid. Turf never stores card numbers.
In the app nowAudit log and devices
Who did what and when, and every signed-in device you can sign out.
Coming at launchSingle sign-on
Sign in through Google Workspace or Microsoft 365 for larger teams.
Coming at launch
Original data is never changed
Skip tracing adds columns and answers beside your values. Every list can be downloaded as it was imported or as it is after checking, at any time.
Ready to work your next list in Turf?
Join the waitlist and be first in when the doors open.
Join the waitlistDownload for Windows
Checking for the latest version…
Join the waitlist
Be first to use Turf, and tell us which plan fits.