backproof is provided by ScaleHQ AI Technologies Private Limited. Legal teams use it for confidential client material, so security is central to how we run the service. This page describes the protections we apply.
- Access. People sign in with a one-time code sent to their email. Everyone needs their own account, and access is limited to the organisations, binders and documents they are authorised to use.
- Separation. Each organisation’s data is kept separate from every other organisation’s, and access is checked on our servers on every request.
- In transit and at rest. Data is protected while it travels to us and while it is stored. Documents are not made available through links that bypass our access checks.
- Staff access. Our staff do not browse customer documents. Access to production systems is limited to the people who operate them, and is recorded.
- Operations. We review changes before they reach production, monitor the service, keep backups, and keep written procedures for security incidents.
If you find a vulnerability, please report it to support@scalehq.ai with the subject line “Security”. Give us reasonable time to fix it before you disclose it publicly.