Skip to main content

Serious about your data.

Security is architecture, not a badge wall.

Isolated by design

Row-level security scopes every record to its owner.

Encrypted throughout

TLS in transit, encryption at rest.

Managed authentication

Clerk-powered sign-in and session management.

Local document processing

PDF operations run in your browser — files aren't uploaded.

Abuse-resistant APIs

Every endpoint is authenticated, rate-limited, and quota-governed.

Managed PostgreSQL

Data is stored in a managed PostgreSQL database (Supabase) with per-user row-level security.

AI processing

When you analyze a document, extracted text is sent to OpenAI over an encrypted connection. We do not sell your data.

Account-scoped files

Uploaded files live in access-controlled storage buckets scoped to your account.

Processors we rely on

Clerk (authentication), Supabase (database and storage), OpenAI (AI generation), Resend (email delivery), Stripe (payments), and Vercel (hosting). Each receives only what is necessary.

The written policy.

The facts above are taken from this site and the privacy policy. There is no badge wall.