Legal
Security
Last updated: Product concepts — pending independent verification
This page describes the security model Synz is built around. It is a statement of design intent, not a certification document.
Access model
Role-based access (owner, admin, member) governs what each person can do inside a workspace.
Projects are private spaces: external workspace users see only the projects they are assigned to, and nothing else in the workspace.
Storage is allocated by the client per team and per project, bounding what external parties can upload and where.
Visibility and auditability
Uploads, comments, approvals, invitations and access changes are recorded in the project's activity view, timestamped and attributed.
Approval workflows keep a durable record of decisions so that what was agreed can be shown later, not reconstructed from inboxes.
Infrastructure
Synz is built on Supabase (authentication, database, storage) and deployed on Vercel. Data in transit is protected with TLS; storage encryption and region choices are configured at the platform level.
Honest scope
These are product concepts. Synz does not claim certifications such as SOC 2, ISO 27001, HIPAA or GDPR until independently verified.
Reporting
To report a security concern, email hello@synz.app with the subject 'Security'. We acknowledge reports within two business days.