Security and trust
Trust starts with clear boundaries.
These are the controls present in the current workspace and the limits that still need attention. This is a technical overview, not a security or compliance certification.
Implemented: workspace and company access
Database row-level policies constrain access to workspace records. Roles and company permissions limit what members may read and change. Server-side queries carry the signed-in identity. Private pages require authentication; search directives are an additional indexing precaution, not an access control.
Implemented: authentication and approvals
Email sign-in uses expiring, single-use links with a confirmation step and server-managed sessions. Pilot state transitions, sensitive-pilot separation of duties and audit records are enforced in the database. Consent is recorded separately for observation, storage, sharing, AI processing and publication.
Test coverage
The repository includes automated tests for cross-workspace isolation, role restrictions, sign-in tokens and sessions, pilot guards and audit restrictions. The release process runs a workflow from sign-in through measurement and reporting. These checks are not an independent penetration test or a guarantee against every security risk.
Data and infrastructure
The deployment uses Vercel hosting, Neon PostgreSQL configured in Frankfurt and an ampassador.com mailbox hosted by Hostinger for transactional email. Regional database hosting does not mean every provider processes every category of data only in the EU. Provider contracts, subprocessors and transfer arrangements need review for each engagement.
Optional AI processing
The copilot requires AI-processing consent and filters out records marked restricted or containing personal data. Suggestions are grounded in permitted records and remain pending review. It uses the Vercel AI Gateway and a configured model provider. Provider retention and training terms must be confirmed before sensitive use; automated classification is not a guarantee that every sensitive detail has been detected.
Exports, deletion and known limits
The workspace supports controlled exports and owner-initiated workspace deletion. Retention settings do not yet perform automatic deletion. Individual data-subject requests, backup retention and provider-side deletion require operational follow-up. Live external adapters and private file attachments are not provided. A comprehensive content security policy and independent security review remain outstanding.
Read the privacy notice or discuss your data requirements before sharing sensitive records.
Start with one workflow.
Tell us where work slows down in your business. We will reply personally to arrange a conversation — no automated sequence, no obligation.