Security overview

Protection designed around legal evidence.

SaaS Tracker combines identity controls, organization isolation, safe source retrieval, preserved evidence, and visible operations. This page is a practical overview, not a certification or warranty.

Identity and access

Email and Google authentication through WorkOS; organization-scoped membership and server-enforced roles.

Tenant isolation

Every protected query is scoped to the authenticated organization. Cross-organization identifiers are rejected.

Evidence integrity

Retrieved versions are hashed, time-stamped, and preserved separately from editable source metadata.

Network safety

Sources are checked through public-address-only retrieval, redirect validation, size limits, and timeouts.

Operational resilience

Structured failure alerts, scheduled-job visibility, private logical backups, and restoration drills support recovery.

AI governance

AI briefs cite preserved language and remain decision support. Human reviewers control assignments and resolution.

Details and reporting

Review the full data-handling statement.

Our legal center describes current providers, subprocessors, retention choices, export and deletion procedures, and AI limitations.

Terms & Policies Report a security concern