Draft for legal review. Effective date to be set on publication.

Data Protection Policy

How TCR LLC protects the information held in ScopeFlow. This sits alongside the Privacy Policy, which explains what we collect and why.

Tenant isolation

Each organisation’s data is isolated at two independent layers: every record carries its organisation, and the database itself enforces row-level security so a query can only reach the organisation it runs for. The application connects to the database as a restricted role; cross-organisation access exists only for platform operators, is limited to named actions, and is written to an audit log before it is possible.

Access control

Access requires both membership of an organisation and a seat on a live licence. Administrators control roles and seats. Sign-in uses individual accounts with password or emailed one-time links; we never ask for passwords by email or telephone.

Encryption and hosting

Data is encrypted in transit and at rest by our hosting and database providers. Uploaded documents are stored in a private bucket and served only to authenticated members of the owning organisation.

Audit trail

Changes to estimates, databases, settings and user access are recorded with who made them and when. Platform-operator actions are recorded separately, with before-and-after detail.

Third parties

AI features send document contents to the provider for the single request that needs them and nothing is retained there. Payment card details are handled by the payment provider only. Email is sent through a transactional email provider under our account.

Backups and recovery

The production database is backed up before every schema change and on a routine schedule. Backups are verified for completeness and held under the same access controls as live data.

Incidents

If we become aware of a breach affecting your organisation’s data we will tell your administrators without undue delay, describe what happened and what we are doing, and cooperate with any notification you are required to make.

Your part

Keep your login to yourself, revoke seats promptly when people leave, and use the Support page to report anything that looks wrong. Questions about this policy: support@scopeflow.us.

ScopeFlow is operated by TCR LLC. Questions about any of these documents: support@scopeflow.us.