Security & privacy
Confidential documents deserve careful handling. Here is how ScopeSift handles your files, your quantities, and your data.
Your uploaded plan sets, project files, and the quantities you produce are never used to train AI models — ours or a provider's. When a plan page is sent to an AI provider to draft a measurement, only what that task needs is sent, under terms that prohibit training on your content.
Uploaded files and database records are encrypted in transit and at rest, with access controls on internal systems and audit logging on sensitive operations.
Delete any project and its files from your projects list, or permanently delete your entire account and its data from Account settings. Backups and logs age out on a routine schedule after deletion.
Subscriptions run through Stripe. We never see or store full card numbers — only limited billing metadata such as subscription status and the last four digits of a card.
The service runs on a named set of sub-processors — Supabase, Railway, OpenAI, Google Cloud, Anthropic, Stripe, and Resend — each under terms that prohibit training on your content. The current list is kept in our Privacy Policy.
Transparency first
We are an early-stage company and do not yet hold third-party certifications such as SOC 2. What we can show you is exactly how the system handles your data today — and we are glad to answer specific security questions from your team.