Security

What’s in place today

Your data is used for one job: your touchpoint inventory, AI tools list, and deployment URLs are used to classify, generate your fix artifacts, run verification scans, and assemble your evidence pack — never sold.

Evidence integrity: snippets and sidecars carry SHA-256 hashes; issued packs are immutable — a re-issue under the Fix-It Promise is a new pack version linked to the original.

Payments: checkout and card handling are done by Stripe; card numbers never touch our servers.

Accounts: passwords are stored hashed; operator actions (manual classifications, exemption reviews, pack issuance, Promise refunds) are gated to the admin role and written to an audit trail.

What we don’t claim

We are not SOC 2 certified and have not completed a third-party penetration test. We’ll say so plainly until we have.

Report a vulnerability

Email don+markclear@lifeofmorr.com with details. We aim to acknowledge within 2 business days.