← Back to home

Security & Compliance

PainFinder trust overview for customers and procurement.

Data access control

Access is role-based (Admin/User/Read-only) with authentication via Clerk and project-level authorization checks.

Transport & platform

Production runs on Vercel with HTTPS/TLS by default. Security headers are enabled in app config.

Monitoring

Health checks and demo API checks are monitored by cron. Failures can trigger Slack alerts.

Data processing model

PainFinder analyzes public-source content and customer workspace settings. We do not auto-post on customer behalf.

Documents

Security questionnaire requests: hello@painfinder.pro