Trust
Security and trust
You run your business on Scope, so here is a plain account of how we protect your data and keep the platform running. We describe only what we do today.
What we do
Infrastructure
Scope runs on managed United States cloud infrastructure behind Cloudflare, which provides a global content network, a web application firewall, and DDoS mitigation. Platform-level patching and network protection are handled by the underlying managed providers.
Encryption in transit
All traffic to Scope is served over HTTPS with TLS. HTTP Strict Transport Security is enforced, and the site sets modern security response headers: X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and a Content-Security-Policy that blocks framing of the site.
Application protection
Public forms are protected against automated abuse with Cloudflare Turnstile. Analytics and non-essential tracking are consent-gated: nothing non-essential loads until a visitor opts in through the cookie controls.
Availability
Scope is designed for high availability on resilient managed infrastructure with provider-level redundancy. We target 99.9% availability as a design goal. This is an engineering objective, not a contractual service-level guarantee.
Data handling and privacy
Customer data is hosted on United States based managed cloud infrastructure and encrypted in transit. How we collect, use, retain, and share data, including SMS consent and TCPA handling, is described in detail in our policies linked below.
Responsible disclosure
If you believe you have found a security issue, email support@scopeinspect.io with the details. We acknowledge reports, investigate, and will keep you updated. Please give us a reasonable opportunity to address an issue before any public disclosure.
The detail behind it
Each of these carries the wording rather than the summary.
We hold no security certification today. Not SOC 2, not ISO, not HIPAA. When that changes this page changes the same day and you will be able to ask for the report rather than take our word for it.
The availability figure above is a design goal. It is what we build towards. It is not a service level we are contractually offering you.
Evaluating Scope for your business?
If your team reviews security practices as part of its due diligence, write to us and we will walk you through them. This page reflects what we do now and changes as the platform does.