Security

Security overview

We take the security and privacy of your business ideas seriously. Below is an overview of the technical and operational controls in place.

Data Encryption

All data is encrypted in transit using TLS 1.3 and at rest using AES-256. Business ideas submitted for evaluation are never stored in plain text.

Evaluation Privacy

Your submitted business ideas are used solely to produce your evaluation. They are not used to train models, shared with third parties, or retained beyond your account.

Infrastructure

FEVAL-AI runs on Vercel's edge infrastructure with automatic DDoS mitigation. Databases are hosted on Supabase with row-level security enforced on every query.

Authentication

Passwordless magic-link authentication. No password database to breach. Sessions are short-lived JWT tokens with automatic rotation.

Access Control

Row-level security ensures users can only access their own evaluations. Service-role operations are isolated to authenticated server-side API routes only.

Report a vulnerability

If you discover a security vulnerability, please email us at security@feval.ai with a description of the issue. We aim to respond within 48 hours and will work with you on coordinated disclosure.