Security posture
Security built around sensitive IP.
Built using Supabase and Lovable, with safeguards for account access, data handling, and operational integrity.
Security controls
Encryption in transit
TLS 1.2+ connections with HTTPS enforced.
Encryption at rest
AES-256 encryption for databases and file storage.
Post-quantum signatures
Dual signatures using ECDSA P-384 and ML-DSA-87 help protect the integrity of signed assessment records.
Tamper-evident audit trail
Trust Ledger uses cryptographic hashes and linked records to support traceability and integrity verification.
Key management
AWS KMS provides managed cryptographic keys for signing operations.
Administrator MFA
Multi-factor authentication is enabled on the sole administrator account.
Data isolation
Row-Level Security restricts access according to account, workspace, and authorized collaboration permissions.
Security reviews
Automated access-policy checks support ongoing review of database permissions and isolation.
AI data handling
Customer data is not used to train AI models.
Network defense
Cloudflare protections help defend against malicious traffic and denial-of-service attacks.
Vulnerability scanning
Dependency and database scans help identify vulnerabilities for review and remediation.
Platform monitoring
Health checks, alerts, and recovery processes support operational reliability.
Incident response
Documented procedures guide investigation, response, and customer communications.
Insurance
Cyber liability and errors-and-omissions coverage support the business.
Compliance monitoring
Security-control monitoring supports ongoing compliance readiness.
Specific controls and commitments depend on the product and deployment.
Discuss your security requirements.
Tell us which controls, access model, and handling requirements your organization needs, and we will confirm in writing what applies to your engagement.
info@clearpathip.ai