Trust & Security
How we handle your data. No fine print.
Evaluating Pyctura for your team? The full security details cover the role matrix, audit log coverage, the exact AI boundary, subprocessors and our security roadmap.
Your workspace is yours alone
Every customer's data lives in its own workspace, and the database itself refuses any request for a workspace you are not a member of. This is checked by an automated test that sets up two customers and proves neither can read, change or delete the other's data.
Zero data training
Your data never trains AI models. Pyctura uses Claude by Anthropic for analysis features, through Anthropic's commercial API, whose terms exclude customer data from model training. Each AI request sends column names and a bounded sample of rows (at most 200), never a full table.
Encryption
All traffic between your browser and Pyctura is encrypted with TLS. Data stored in our database and file storage is encrypted at rest by our infrastructure providers.
Where your data lives
Your data is stored and processed in the United States: the database and file storage run on Supabase in AWS us-east-1, and the application runs on Vercel. The full subprocessor list (Supabase, Vercel, Anthropic, Resend, GitHub) is on our security details page.
Private by default
Reports are private to your workspace unless you share them. A shared link is either private (sign-in required, expires after 30 days) or public, you choose whether viewers can see the data behind the charts, and you can revoke a link at any time.
Data retention
When you save or publish a report, the rows you uploaded are stored with it in your workspace so the report can be opened and refreshed later. Uploads you never save are not stored on our servers. You can delete your reports and flows at any time, and on request we delete your account and everything stored in your workspace. Account data is kept while your account is active.
Roles and audit log
Access is role-based: owners and admins manage the workspace and its members; creators and contributors build and publish reports; viewers read. The database enforces these roles. Every change to reports, flows, members and invitations is written to an append-only audit log that owners and admins can filter and export.
Your data rights
Wherever you are, you can ask us to access, correct, export or delete your personal data. Email hello@pyctura.ai and we will act on it. See Data Rights for details.
Contact
Security questions, questionnaires and vulnerability reports: security@pyctura.ai We aim to respond to security inquiries within 48 hours.