The questions a company’s security team asks first, with a short, plain answer to each. It covers the Company plan.
Checked against our systems on September 29, 2026.
Accounts, saved notes & search history are stored in a database run by Supabase, in its US West region. The website is hosted by Netlify. Your questions travel through a service run by Cloudflare on their way to the AIs.
These companies process data for us. Each one gets only what it needs to do its job.
| Company | What it does | What it receives |
|---|---|---|
| Supabase | Database & sign-in | Your email, saved notes, search history |
| Netlify | Hosts the website | Web traffic to the site |
| Cloudflare | Sends your question to the AIs & brings the answers back | The question text & the answers |
| AI providers | Write the answers | The question text (see the next answer) |
| Stripe | Payments | Payment details. We never see card numbers. |
| Resend | Sends our emails | Your email address & the email itself |
| Persona or Onfido | Identity check, only for people who apply as an Anonymous Expert Solver | Their ID documents. We only get pass or fail. |
The text of the question (plus any link or photo description you add). We never send your name, email or account details. If you are signed in, the AI that writes the final answer also gets a short list of your recent questions & answers, so it can follow along.
Our direct AI providers are Anthropic, OpenAI, Google, Groq & DeepSeek. Some other AIs are reached through OpenRouter, which passes the question on to the company that makes that AI.
Not unless your admin says so. On the Company plan, questions go only to AI providers based in the USA until your admin turns the others on. The admin can switch it back off any time.
With Google, with Microsoft, or with a link we email them.
Single sign-on through a company’s own directory is not available yet.
Account data is kept while the account is active & for 30 days after it is deleted, then it is permanently removed. Security logs (IP addresses & session data) are kept for 90 days, then deleted. The full wording is in section 10 of our Privacy Policy.
Your admin can export everything your team has shared. It is kept at least 1 month after your account closes, with a warning to download it.
The data stay with the company & we keep an anonymized record if we can sell the anonymized human corrected data. We sell only anonymized data, never the work itself or anything that names your company or a person, and your company can ask us about a share of that revenue. The exact terms are in section 6A of our Terms.
None yet. We do not hold SOC 2, ISO 27001 or any other security certification. If your team needs answers for a security review, send us your questionnaire and we will answer it in writing.
Security questions: support@reallysolved.com. For privacy requests, write to privacy@reallysolved.com.