Security and data

A report is opened in your browser. Only its text is sent for checking. The PDF or Word file itself is not uploaded.

The report text is held only until the first draft and the final are compared, then deleted. A report that is never marked final has its text cleared automatically after 45 days.

The flags, each surveyor’s call on them and the QA record are kept, so your firm can show how a report was checked.

Report text goes to the AI review under terms that do not allow it to be used to train models.

Each firm’s scans, settings and records are separate. A sign-in for one firm is no good at another.

Only people your admin has added can sign in. Sign-in is by an emailed link that works once and expires after 15 minutes, and repeated requests are slowed down.

Surveyors see their own reports. Admins, and reviewers on Super, see the firm’s.

Every page of the app tells search engines not to index it.

• Anthropic: The AI review of report text
• Railway: SurveyStack’s database and server, where scans, flags and calls are kept
• Vercel: Hosting for the StackProof app and this website
• Postmark: Sign-in emails and QA record emails
• Stripe: Subscriptions and card payments
• Cloudinary: Your firm’s logo

An admin can ask us to delete the firm’s scans and records at any time, and they are deleted when an account closes.