Security and data

What the Workspace does today. Encryption in transit, a database with per-workspace access checks on every query, Clerk-managed sign-in, role-based access inside a workspace, audit logging of administrative actions, and export and deletion on request.

What we do not claim. No SOC 2, ISO 27001, or CSA STAR certification is claimed. When an independent assurance report exists, it will be linked here with its date.

Who can access your data. Named Synthetic Labs staff, for support with your consent, for security incidents, or when the law requires, with each access logged.

Reporting a vulnerability. Use the contact form and choose "Something else", or the security address on the contact page once published. We acknowledge within two business days.