Your documents deserve
a private workspace.
Here’s how ReplyProof protects your work, what leaves your workspace for processing, and what this early beta does not promise.
Encrypted storage and transit
Cloudflare D1 and R2 encrypt stored data at rest. HTTPS protects data in transit. This is provider-managed encryption, not end-to-end encryption.
Separate customer workspaces
The server verifies your account before data access. Every customer query and file download is scoped to your user ID. Passwords are managed by Supabase Auth.
Evidence stays visible
Draft citations are checked against source passages. Answers require your approval before export. Missing evidence is flagged instead of quietly filled in.
Bounded AI requests
Fixed models, input and output limits, request deadlines, draft quotas, and a shared spending ceiling restrict AI activity. The model cannot browse, run code, or start autonomous jobs.
What is sent to AI providers?
Source passages are sent to OpenAI to create search embeddings. When drafting, relevant passages and your question are sent to OpenAI. We request no stored response state. OpenAI’s separate abuse-monitoring retention can still apply, typically for up to 30 days; this is not a zero-retention service.
What can the owner see?
The owner console shows account metadata, trial status, usage totals, error categories, and feedback you submit. It does not offer document browsing, customer impersonation, or answer inspection. Authorized infrastructure administrators can still access operational systems when needed for support or security.
Honest beta boundaries
ReplyProof has not undergone an independent security audit and does not claim SOC 2, ISO 27001, HIPAA, or other certification. No service can promise absolute security. Avoid uploading credentials, private keys, regulated health information, or documents you are not authorized to share.
Report a concern
Use Account & support and choose “Security concern.” Include the affected feature and steps to reproduce, without including other users’ data or secrets. For details on storage, processing, and deletion, read the privacy notice.