Security & Encryption

How we protect your contracts and data

Encryption

At Rest: AES-256 encryption for all stored contract data
In Transit: HTTPS/TLS 1.3 for all connections

Backups

Daily automated backups. 30-day retention policy. Redundant storage to prevent data loss.

Compliance

GDPR: EU data protection compliant
CCPA: California privacy rights respected
SOC 2: Type II certification in progress

Availability

99.9% uptime SLA. Hosted on Vercel's global CDN. Multiple redundancy zones across continents.

Data Ownership & Rights

  • You Own Your Data — Contracts and metadata belong to you
  • No Selling — We never sell or share your data with third parties
  • Export Anytime — Download all your data as CSV
  • Delete on Request — We'll remove all your data permanently
  • Right to be Forgotten — GDPR compliant deletion

Questions?

Email us at support@pact.ink and we'll respond within 24 hours.

Technical Details

Infrastructure: Hosted on Vercel's global edge network with automatic HTTPS/SSL

Database: PostgreSQL with row-level security (RLS) enabled

Authentication: Supabase Auth with support for email/password and OAuth

File Storage: Supabase Storage with signed URLs and expiration policies

Penetration Testing: Third-party security audits conducted regularly