Trust
Security & Trust
You run your business on Scope, so here is a plain account of how we protect your data and keep the platform running. We describe only what we actually do today.
Infrastructure
Scope runs on managed United States cloud infrastructure behind Cloudflare, which provides a global content network, a web application firewall, and DDoS mitigation. Platform-level patching and network protection are handled by the underlying managed providers.
Encryption in transit
All traffic to Scope is served over HTTPS with TLS. HTTP Strict Transport Security is enforced, and the site sets modern security response headers: X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and a Content-Security-Policy that blocks framing of the site.
Application protection
Public forms are protected against automated abuse with Cloudflare Turnstile. Analytics and non-essential tracking are consent-gated: nothing non-essential loads until a visitor opts in through the cookie controls.
Availability
Scope is designed for high availability on resilient managed infrastructure with provider-level redundancy. We target 99.9% availability as a design goal. This is an engineering objective, not a contractual service-level guarantee.
Data handling and privacy
Customer data is hosted on United States based managed cloud infrastructure and encrypted in transit. How we collect, use, retain, and share data, including SMS consent and TCPA handling, is described in detail in our policies linked below.
Responsible disclosure
If you believe you have found a security issue, email support@scopeinspect.io with the details. We acknowledge reports, investigate, and will keep you updated. Please give us a reasonable opportunity to address an issue before any public disclosure.
Policies
The detail behind the practices above lives in our policies:
Evaluating Scope for your business?
If your team needs to review our security practices as part of its due diligence, contact us at support@scopeinspect.io and we will walk you through them. This page reflects our current practices and is updated as the platform evolves.