Trust
How we protect your data
Encryption and access
Portal sessions and operator sessions are signed. Files and records sit in access-controlled storage. Database rows use row-level security when Supabase is configured, so a client token cannot read another tenant. Traffic uses TLS. Secrets stay in server environment variables, not in the browser bundle.
Read-only by default
Microsoft 365, Google Workspace, AWS, and Azure connections request read scopes for MFA, directory, and posture signals. We do not change a tenant unless you start an explicit remediation action you confirm. Containment webhooks fire only after you confirm the target.
Consultancy, not a carrier
Cyber Ready Pro prepares evidence and readiness materials. We do not bind coverage, pay claims, or guarantee that a carrier will quote or renew. Carriers decide. The disclaimer states that limit in full.