Security at NorthReason

1. Security Overview

At NorthReason, we understand that the code you generate and the prompts you provide contain valuable intellectual property. We have implemented strict security controls to ensure your data is never compromised, leaked, or used to train public models without your consent.

Our platform is built with a "Security by Design" philosophy. We use modern, battle-tested frameworks and infrastructure providers to ensure enterprise-grade reliability.

2. Encryption & Data Storage

All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.

• Database: Your account details and generation history are stored in Supabase (PostgreSQL), which is hosted on AWS with encrypted storage.
• AI Processing: Prompts sent to our AI inference provider (Groq) are transmitted securely via API. We do not allow third-party AI providers to train their models on your proprietary prompts.

3. Access Control

We enforce strict access controls to prevent unauthorized data access:

• Row Level Security (RLS): Our Supabase database utilizes RLS. This means at the database level, a user's authentication token is required to read or write their own data. Even in the event of a database query flaw, users cannot access each other's data.
• Authentication: Passwords are cryptographically hashed. We support secure session management and token expiration.

4. Responsible Disclosure

We value the work of security researchers. If you discover a potential security vulnerability in our platform, we encourage you to notify us immediately. We are committed to working with you to resolve the issue quickly.