How we protect your account and documents.
What is in place today. We describe only what the product actually does.
Connections and storage
Connections
Seiton Paw is served over HTTPS.
Documents
Uploaded documents are stored in a private storage bucket at Supabase. Storage access rules limit each file to the account that uploaded it, and the app opens files through links that expire after one hour.
Your account
Two-factor authentication
Turn it on in Settings → Security. Once it is on, the app requires your authenticator code to sign in.
Active sessions
Settings → Security lists where you are signed in and lets you sign out other sessions, when session management is available for your account.
Our team's access
Our admin tools show the team your account, trips and document records (name, type and check result - not the files). Admin views of user accounts and trips are logged.
Service providers
The app runs on Supabase (database, sign-in and file storage) and Vercel (hosting). Anthropic runs Pawlo and the automated document check, and Stripe processes payments. See the Privacy page for what each provider receives.
Report a vulnerability
Found a security issue? Email security@seitonpaw.com with a description and steps to reproduce it. We will not take legal action against good-faith researchers who report issues to us privately.
