Security & Trust

At ScopeGuard, protecting your project data is our top priority. We use enterprise-grade infrastructure to ensure your intellectual property remains secure.

Infrastructure

• Hosting: Hosted globally on Vercel's Edge Network for maximum uptime and DDOS protection.
• Database: PostgreSQL managed by Supabase, providing enterprise-grade reliability and point-in-time recovery.
• AI Processing: Powered securely by Google Gemini AI.

Authentication

• Passwordless Access: We use secure, passwordless Magic Links to eliminate credential theft.
• Session Security: HTTP-only, secure cookies protect against XSS session hijacking.

Data Isolation

• Row Level Security (RLS): Cryptographically enforced at the database level. Users can only access data belonging to their specific Organization or Project.
• Organization-level Access Control: Strict role-based boundaries between workspaces.

Encryption

• In Transit: 100% of traffic is encrypted via HTTPS/TLS 1.2+.
• At Rest: Database protections and physical security are managed by Supabase and AWS.

AI Transparency

• Human in the Loop: AI assists—it does not replace—human decision-making. Users must review and approve requirements before generating project baselines.
• Validation Required: AI-generated outputs (such as suggested acceptance criteria or contradiction detection) should always be validated by a professional before implementation.
• No Public Training: We do not use your private project transcripts or generated PRDs to train public AI models.