Certification status
Shuttlewright is not SOC 2 or ISO 27001 certified. We have no third-party audit report to share. If you need one, Security Desk is not a fit yet.
What goes where
- You upload documents or paste text into your workspace. They are stored in our database (Neon) as text.
- When you ask for a draft, we search your approved sources on our own server. We do not use a language model to find evidence.
- Only when a question has matching evidence, the question text and the matching sentences are sent to Cloudflare Workers AI to check the match and word the draft. Nothing else from your workspace is sent.
- If Cloudflare is unavailable, the draft stays as the verbatim sentences from your source, or the question is marked as needing input. No other AI provider is used.
- Each draft records which model, if any, worded it. "none (extractive)" means no model wrote it.
Subprocessors
- Render hosts the application servers.
- Neon hosts the database.
- Cloudflare Workers AI words and checks draft answers. Cloudflare documents that it does not use Workers AI customer content to train models or improve its services.
- Polar processes payments as our merchant of record. It does not receive your workspace content.
Model training
We do not train any model on your content, and we do not allow our providers to.
Encryption
- The site and API are served over HTTPS.
- Passwords are stored as salted PBKDF2-SHA256 hashes, never in plain text.
- Stored connector settings are encrypted.
- Encryption of the database disk is handled by our hosting providers. We have not audited it ourselves.
Access
- Each customer has a separate workspace. A user can only read their own workspace through the application.
- Sign-in is by email and password. There is no single sign-on or multi-factor authentication yet.
- Shuttlewright staff can access the database for support and operations. We do not have formal access reviews.
Audit trail
Source uploads and deletions, connector and API key changes, and retention runs are written to an audit log. Entries are hash-chained, and the log reports whether the chain is intact. Draft generation is not in that log today. It records changes in your workspace, not who inside Shuttlewright viewed the database. Deleting all workspace data also removes its audit log.
Deletion
- You can delete a single source or all workspace data from inside the workspace. Deleting a source also removes the drafts that cited it.
- You can also ask us by email and we will delete your content.
Not yet in place
- No SOC 2 or ISO 27001 certification, and no penetration test report.
- No SSO or multi-factor authentication.
- Draft answers are suggestions. A person at your company must review them before sending.
Contact
Questions or deletion requests: fuseini.metadata@gmail.com ยท Founders: fuseini.metadata@gmail.com, alhassanmo365@gmail.com. See also the Privacy Policy.