Security is foundational to SpecNavi. We protect your product requirements with enterprise-grade security, verified processes, and full audit trails.
Our security philosophy focuses on data protection, verified processes, and transparency. We never train AI models on customer data without explicit consent.
Your source documents and generated requirements are never used to train our AI models. Data isolation is guaranteed.
All AI-generated content passes through verification and human approval before reaching your stakeholders.
Every action is logged. Track who created, modified, or approved each requirement with complete lineage.
Critical gates ensure human review before any requirement is published or exported.
TLS 1.3 for data in transit
All connections use HTTPS with modern encryption protocols
AES-256 for data at rest
Customer data encrypted when stored in our databases
Role-Based Access Control (RBAC)
Enterprise tiers control who can access, edit, and approve
Comprehensive audit logging
All user actions logged for compliance and security review
SpecNavi is hosted on Vercel, which maintains SOC 2 Type II compliance for its infrastructure. This covers data center security, access controls, change management, and environmental controls.
Detailed documentation of SOC 2 Common Criteria (CC1-CC9) security controls.
Contact for details: Security testing summary and remediation plans available for enterprise customers.
Contact for details: Information about additional compliance certifications and third-party audit reports.
Our security team is available to answer detailed questions, provide documentation for your procurement process, or complete your security questionnaire.
For complete details on data practices, see our Privacy Policy and Terms of Service.