{"dataHosting":{"application":"Railway — SOC 2 Type II compliant infrastructure","database":"Supabase — SOC 2 Type II, GDPR compliant, data encrypted at rest","clientManagement":"Airtable — SOC 2 Type II certified","secretsManagement":"Doppler — SOC 2 Type II, secrets never stored in code"},"dataHandling":{"clientDataIsolation":"Each client's data stored with client_id partitioning. No cross-client data access.","apiKeys":"Client CMS credentials stored in Doppler encrypted vault. Never in code or logs.","dataRetention":"Score history and content retained indefinitely unless client requests deletion.","deletion":"Full data deletion within 30 days of written request to hello@rankara.net"},"accessControls":{"authentication":"API key authentication for all external service calls","clientAccess":"Clients access their data via unique client_id URL — no shared authentication","employeeAccess":"Minimal access principle — only necessary personnel can access client data"},"thirdPartyServices":[{"name":"Anthropic Claude","purpose":"AI content generation","dataShared":"Business context only — no customer PII"},{"name":"Perplexity","purpose":"AI citation checking","dataShared":"Business name and keyword queries only"},{"name":"ValueSERP","purpose":"Google ranking data","dataShared":"Keyword and location queries only"},{"name":"Google APIs","purpose":"Search Console, PageSpeed, GBP","dataShared":"Read-only access via service account"},{"name":"Yelp API","purpose":"Review monitoring","dataShared":"Business name and location only"}],"compliance":{"gdpr":"Data deletion requests honored within 30 days","ccpa":"California consumer data rights honored on request","soc2":"Infrastructure providers are SOC 2 certified. RANKARA application SOC 2 certification roadmap available on request."},"contactForSecurityReview":"hello@rankara.net","lastUpdated":"2026-08-23"}