Security

How IR Assist protects your account and what you ask. We only state what is true today.

Encryption

• Every connection uses HTTPS (TLS), and browsers are told to use HTTPS only.
• The database encrypts all stored data, including backups, with AES-256.
• Passwords are never stored, only a secure hash of them.

Where your data lives

• The database and sign-in run on Supabase in Singapore. Supabase is SOC 2 Type 2 audited.
• The website runs on Vercel in Singapore. Vercel is ISO 27001 certified and SOC 2 Type 2 audited.
• IR Assist itself has not been independently certified. The certifications above belong to our hosting providers.

AI and your questions

• Searches and assistant questions go through OpenRouter to an AI model provider.
• We allow only providers that do not store your questions or use them to train AI models (zero data retention).
• Your name, email and organisation are never sent to an AI provider.

Access

• The data bank is open only to signed-in users.
• Database rules stop any user from reading another user’s account details.
• Search and assistant requests are rate-limited to prevent abuse.

Your data, your control

• Delete your account and its personal data at any time in Settings.
• Search logs and error logs are not linked to your name and are deleted after 12 months.
• No advertising or tracking cookies.

Full details are in the Privacy notice, written under Malaysia’s Personal Data Protection Act 2010.

Report a security issue

Email jchandrasegaran@gmail.com. We will reply as soon as we can and fix confirmed issues promptly.