Trust

Your data stays yours.

Project material is seen only by the people on the project: signed, identified when the work needs it, reachable by name. Below is what that means in practice and who processes what.

01Signed before anything is seenEvery contributor signs a contributor agreement, a confidentiality agreement and a code of conduct before any project material. The texts are versioned; a change means everyone signs again.
02Access by projectMaterial we host for a project is visible only to the people on that project, behind their own sign-in. Nobody else on the network can see it exists.
03Verified identityGovernment ID and selfie verification through Persona for the experts on your project when the work needs it. We never store the images.
04Two-factor sign-inExperts can add a second factor to their account, and we can require it for a project.
05Private filesRésumés, uploads and project files live in a private store and open only through the site, by one-use grant. No public URLs.
06Payments without bank detailsExperts are paid through Dots. We hold a name, an email and a phone number for payouts, never account numbers.
07Provenance on every itemEvery delivered item names its author (to us), its upstream source and licence where there is one, and the agreement it was produced under.
08A person answersExperts and clients reach a named person on our team, not a ticket queue.

Subprocessors

Six services, named.

ServiceWhat it does for usRegion

VercelHosting and private file storageUnited States

NeonDatabase (Postgres)United States

ClerkExpert sign-in and two-factorUnited States

ResendTransactional emailUnited States

PersonaIdentity verificationUnited States

DotsExpert payoutsUnited States

Policies

Security, terms and conduct

The published policies every expert and client works under.

Read them ↗

Questions

Security review?

Send the questionnaire. The people who built the platform answer it.