Security
How Graphletter handles data protection and access control.
Encryption
All data encrypted in transit (TLS 1.3) and at rest (AES-256). Database connections use SSL.
Data Isolation
Your organization's data is isolated from every other tenant at the database layer (Postgres row-level security). Users can only access their own data.
Documents Aren't Retained
Uploaded documents are processed in short-lived compute and not kept beyond the assessment. AI providers receive only extracted text, never your raw files.
Authentication
Sign in with Google or GitHub. Every protected page and API call re-verifies your identity on the server.
Vulnerability Disclosure
Report security issues following SECURITY.md. We acknowledge reports within 48 hours.