Enterprise-Grade Security

Your conversations are protected by multiple layers of security. Bank-grade encryption, regular security testing, and SOC 2 certified infrastructure.

AES-256 EncryptionAt rest & in transit
SOC 2 Type IICertified infrastructure
Data RightsAccess & deletion on request
Security TestingQuarterly, tied to major releases

Security at Every Layer

AES-256 Encryption

Bank-grade encryption for all sensitive data

  • AES-256-GCM encryption at rest
  • TLS 1.3 for all data in transit
  • OAuth tokens encrypted separately
  • Secure key management

Zero-Trust Access Model

Every query is validated at the database level

  • 100% Row Level Security coverage
  • Role-Based Access Control (RBAC)
  • JWT token authentication
  • Separate roles table (no privilege escalation)

Ongoing Security Testing

We test on a regular cadence, not just annually

  • Penetration testing at least quarterly, tied to major releases
  • Automated vulnerability scanning
  • Replay attack prevention
  • Input validation & sanitization

Compliance & Audit

Transparent and auditable

  • Self-serve data deletion & export
  • Comprehensive audit trails
  • SOC 2 Type II certified infrastructure
  • Data retention policies

Security Deep Dive

Built on SOC 2 Type II Certified Infrastructure

RapportScore runs on Supabase, which maintains SOC 2 Type II compliance. This means our underlying infrastructure meets rigorous security standards for security, availability, processing integrity, confidentiality, and privacy.

  • PostgreSQL database with encryption at rest
  • Automatic key rotation and management
  • 24/7 infrastructure monitoring

Compliance & Data Rights

Your Data Rights

Exercise your data rights at any time. You can access, correct, and delete your personal data on request.

Privacy & Terms

Review our privacy policy and terms of service to understand how we handle your data.

Privacy PolicyTerms of Service

Security Questions?

Have questions about our security practices? Need more details for your security review? We're here to help.

Contact Us