Security Built Directly Into the Architecture
You trust Unscrip with vehicle titles, insurance documents, and personal credentials. We treat security as a foundational product requirement, not an afterthought.
Row Level Security (RLS)
Every database table in Unscrip enforces PostgreSQL Row Level Security at the database kernel level. Even if an API request is made with valid credentials, the database engine strictly isolates queries to records matching auth.uid().
Zero Public Document Storage
Vault files, titles, registration cards, and receipts are saved into private encrypted storage buckets. Files are never assigned permanent public URLs; access is mediated through short-lived cryptographic signed URLs generated on-demand.
PKCE Authentication & Sessions
Authentication uses Proof Key for Code Exchange (PKCE) with HTTP-only, secure, SameSite cookies. Passwords are never stored in plaintext and are hashed with industry-standard key derivation functions.
Grounded AI Safety
Our Google Gemini integration operates under a strict 'AI suggests, user confirms' architecture. Unscrip's AI models can never execute silent database modifications or delete user records without explicit human review.
Encryption in Transit & at Rest
All traffic is encrypted using TLS 1.3 with modern cipher suites. Data at rest in PostgreSQL and document storage is protected with AES-256 block encryption.
Immutable Audit Trails
Administrative actions, support interactions, and significant data alterations write structured events to an append-only audit event log with timestamping and IP capture.