Security

How your data is protected.

A plain summary of the measures that keep your account and datasets safe.

Authentication

Sign-in and account management are handled by Clerk, a dedicated authentication provider. Passwords are never stored by DClaw directly, and the workspace is only reachable with a valid session.

Data isolation

Every dataset and saved forecast is tied to your user account. Queries are scoped to your identity, so one account cannot see another’s data. The shared demo datasets are the only data visible to everyone.

Infrastructure

  • Hosted on Vercel with encryption in transit (HTTPS).
  • Data stored in Neon Postgres with encryption at rest.
  • Secrets are managed as environment variables, never committed to source.

Reporting an issue

Found a vulnerability? Please email hello@smritiraj.online with details and we’ll respond promptly. Please don’t publicly disclose until we’ve had a chance to address it.