Skip to content

Security & privacy

How ScopeSift handles your plans, quantities, and account data.

Your plans are never used to train AI

Your uploaded plan sets, project files, and the quantities you produce are never used to train our AI models or a provider's models. When a plan page is sent to an AI provider to draft a measurement, only what that task needs is sent, under terms that prohibit training on your content.

Encrypted in transit and at rest

Uploaded files and database records are encrypted in transit and at rest, with access controls on internal systems and audit logging on sensitive operations.

You can manage and delete your data

Delete any project and its files from your projects list, or request account deletion from Account settings. If you have unused purchased takeoffs, you can use them first, contact support about a refund, or explicitly give them up without a refund during deletion. Limited records, backups, and logs remain as described in our Privacy Policy.

Payments handled by Stripe

Subscriptions run through Stripe. We never see or store full card numbers: only limited billing metadata such as subscription status and the last four digits of a card.

A small, openly listed set of providers

The service runs on a named set of sub-processors: Supabase, Railway, OpenAI, Google Cloud, Anthropic, Stripe, and Resend. Our Privacy Policy explains what each receives, the AI-processing terms, and retention. Optional advertising measurement through Meta is listed separately and requires your permission.

Certifications and questions

We are an early-stage company and do not yet hold third-party certifications such as SOC 2. We can show you how the system handles your data today and answer specific security questions from your team.