Security

Encryption

All traffic to PredictiveDeployment uses HTTPS (TLS). Data is encrypted at rest by our database provider.

Access control

• Every database table enforces row-level security, so people only see the projects they're assigned to.
• Roles control what each person can do. Internal team notes and AI insights are hidden from client roles.
• Administrative actions run on the server with role checks, and platform admin access is limited to a small number of named staff.

Sign-in

Sign in with Google, Microsoft, an email sign-in link, or a password. Passwords are stored only as secure hashes by our authentication provider.

Abuse protection

AI features and public forms are rate-limited, and the contact form has spam protection.

Infrastructure

PredictiveDeployment is hosted on Lovable, with Supabase providing the managed PostgreSQL database, authentication and file storage.

Compliance

We don't currently hold a SOC 2 report. We're happy to complete your security questionnaire, so just ask. Please don't upload protected health information (PHI) unless we've signed a business associate agreement with you.

Report a vulnerability

If you think you've found a security issue, email jason@predictivedeployment.com with "Security" in the subject line. Please give us a reasonable chance to fix it before you share it publicly.