Security & privacy
Your plans stay yours.
ScopeSift is built for confidential bid documents. Here is exactly how your plan sets are handled, in plain terms. The full detail lives in our Privacy Policy.
Your plans are never used to train AI
Your uploaded plan sets, project files, and the quantities you produce are never used to train AI models — ours or a provider's. When a plan page is sent to an AI provider to draft a measurement, only what that task needs is sent, under terms that prohibit training on your content.
Encrypted in transit and at rest
Uploaded files and database records are encrypted in transit and at rest, with access controls on internal systems and audit logging on sensitive operations.
You can delete your data anytime
Delete any project and its files from your projects list, or permanently delete your entire account and its data from Account settings. Backups and logs age out on a routine schedule after deletion.
Payments handled by Stripe
Subscriptions run through Stripe. We never see or store full card numbers — only limited billing metadata such as subscription status and the last four digits of a card.
A small, openly listed set of providers
The service runs on a named set of sub-processors — Supabase, Railway, OpenAI, Google Cloud, Anthropic, Stripe, and Resend — each under terms that prohibit training on your content. The current list is kept in our Privacy Policy.
Certifications and questions
We are an early-stage company and do not yet hold third-party certifications such as SOC 2. What we can show you is exactly how the system handles your data today — and we are glad to answer specific security questions from your team.