Protected information
- Encryption in transit
- Controlled data access
- Safeguards for customer documents
Trust Center
Your business information deserves serious protection.
SmartPR is built with safeguards designed to protect sensitive business information, control access, and support reliable, secure workflows throughout the licensing and permitting process.
Controlled access
- Secure authentication
- Workspace permissions
- Administrator access controls
Ongoing security
- Continuous security testing
- Vulnerability remediation
- Monitored security practices
Security
How we protect your information
Access protection
SmartPR applies server-side authorization controls designed to restrict access to authorized users.
Database security
Customer information is protected through database access restrictions and application-level permissions.
Application security
Security testing and dependency checks are integrated into SmartPR's development and release processes.
Continuous improvement
Security controls are reviewed and strengthened as the platform evolves.
Supporting detail from internal testing, October 2026
- 248
- API routes reviewed for authorization
- 96
- database tables checked for public access restrictions
- 0
- known vulnerabilities in production dependencies at review
- TLS 1.2+
- encryption in transit
Results from SmartPR's own security testing of the live platform. Not an independent assessment.
Controls
Security built into how SmartPR runs
Secure sign-in
Accounts are protected by strong password requirements, screening against known breached passwords, and protection against repeated sign-in attempts.
Workspace permissions
Each workspace's information is available only to its members, with roles that control what each person can do.
Enterprise identity
Enterprise workspaces can manage users through standard identity provisioning.
Abuse protection
Usage limits on public features help keep the service available and protect against misuse.
Activity records
Administrative and data-change activity is recorded so it can be reviewed when needed.
Credential safekeeping
Service credentials are held in a managed secret store and are never part of the application code.
Secure development
Every change is reviewed through an automated pipeline of security tests and checks before release.
Dependency security
Third-party software is monitored for security advisories and updated promptly.
Controlled support access
When our team needs to help with an account, access is time-limited, requires a stated reason and is recorded.
AI data handling
AI features run on our servers, and activity records capture usage details rather than your content.
Changelog
Recent security improvements
October 2026
- Enhanced authentication protections
- Strengthened access controls across customer workspaces
- Strengthened database access restrictions
- Expanded automated security checks
- Improved application dependency security
- Added browser security protections across the platform
- Expanded abuse protection on public features
Earlier in 2026
- Tightened administrator access
- Introduced automated security checks on every change
Subprocessors
Trusted infrastructure partners
Vendors that process or store customer data on our behalf. More detail is available on request.
- SupabaseSign-in, database and document storage
- RailwayApplication hosting and logs
- StripePayments (card details are held by Stripe)
- xAIAI assistance for business questions and descriptions
- Microsoft AzureSpeech-to-text and AI model hosting
- ResendTransactional email delivery
- Google WorkspaceNotification email
- Browser UseBrowser automation for optional agency portal runs
- Google AnalyticsWebsite usage analytics
- OpenStreetMap NominatimAddress geocoding for maps
- Esri and OpenFreeMapMap imagery and tiles
Documents
Security Overview
A summary of how SmartPR protects your information, for security reviews and procurement.
Have a security question? Contact our team.