Security & Data Privacy
Your campaigns, guidelines, and legal documents are sensitive. Here is exactly how Sawyer Preflight protects them.
Data encryption
All data is encrypted with TLS 1.2+ in transit and AES-256 at rest on Supabase infrastructure. Encryption is on by default for every account — there is nothing to configure.
Data isolation
Row-level security is enforced at the database layer, not the application layer. Every query is scoped to your company — your projects, documents, and reports are access-restricted by row-level security and not exposed through application logic.
Private storage
All uploaded files live in private Supabase Storage buckets. Nothing is publicly addressable — access happens through short-lived signed URLs — up to 1 hour during analysis and processing, and 5 minutes for assets delivered through client share links. Share links themselves last 15 days by default and are revocable at any time.
AI processing
Sawyer Preflight uses approved AI, media processing, music recognition, social data, email, payment, and storage services. We do not use your uploaded content to train AI models.
Data retention
Uploaded files are retained while your subscription is active, and for 30 days after cancellation. Reports are retained for 12 months. You can delete individual files, projects, or your entire account at any time from account settings.
No training guarantee
We do not use your uploaded content or analysis results to train AI models. This is governed by our agreements with AI subprocessors. See our Privacy Policy for the complete list of subprocessors and their data handling commitments.
AI-assisted content screening
Uploaded content is screened by AI detection models as part of every analysis, alongside our cultural and regulatory checks.
Compliance roadmap
SOC 2 Type II certification is planned for Q4 2026. Enterprise customers can contact us with compliance questions.
Subprocessors
Subprocessor details are available to enterprise customers on request. None of our subprocessors use your content for model training under our agreements.
Questions?
For questions about data handling or privacy, contact us.