Security
The most secure copy of your contract is the one we never keep. Our security model starts from data minimization, then protects what little remains.
Data minimization first
Uploaded documents are processed in memory and discarded after extraction unless you explicitly save them. What we store is the redacted, structured summary — not the document.
In transit and at rest
All traffic is TLS. Stored data is encrypted at rest by the hosting platform; saved contracts (opt-in only) are additionally redacted before storage.
Capability URLs
Reports live at unguessable URLs (~142 bits of entropy) and are additionally bound to your account when you sign in. Treat the link like a key — anyone you send it to can read that report.
Payments
Handled entirely by Stripe. Card numbers never touch our servers.
Third parties
Live extraction uses Anthropic's API under commercial terms (inputs not used for model training). Sign-in uses Google OAuth or emailed magic links — we never see or store passwords.
Found something?
Report vulnerabilities to security@joboffer.ink. We respond within 48 hours and won't pursue good-faith researchers.