Security & privacy
Private by default. Portable by design.
Jake holds the most sensitive thing a rep has: their live pipeline. These are the commitments that decision earns, written plainly enough to hold us to.
Your manager never sees Jake
There is no manager dashboard, no team leaderboard, no call score sent upstairs. If you share a scorecard, it is redacted by default: the shape of the deal, never names, quotes, or values.
Isolated by construction
Every deal, transcript, and draft is scoped to your account with Postgres row-level security. Server routes verify your identity before any privileged read. One rep can never see another rep’s pipeline.
No training on your data
Synthesis runs through the Anthropic API under terms that do not train models on your content. Your calls make your scorecards, not somebody’s foundation model.
Delete means delete
Remove a deal and its transcripts, evidence, drafts, and actions go with it. Ask for full account deletion and you get it: no export ransom, no retention theatre.
The practical details
Data in transit and at rest
TLS everywhere; storage encrypted at rest on Supabase (Postgres) and Vercel infrastructure in the EU region.
Access model
OAuth connections (Gmail, Salesforce) are read-only scopes you grant personally and can revoke at any time from Settings or the provider.
Least-privilege engineering
Privileged server operations run only after an explicit ownership check: this invariant is documented in the codebase and enforced in review.
Payments
There are none during early access. No card data exists in the system at all.
Roadmap
SOC 2 readiness work is scheduled ahead of the team tier. Ask us where we are on it any time.
Questions a security review would ask? Email jake@tryjake.com and you’ll get answers from the person who wrote the code.