Security and availability commitments
This page covers the scm.cc production service at app.scm.cc, operated by Persoon.ai Inc.. It states security and availability commitments for that service. It does not describe a customer's own cloud accounts or the systems a customer connects.
What this page is
SOC 2 readiness is in progress. This page is not a SOC 2 report.
This page makes no certification, authorization, or compliance claim.
This product provides compliance readiness and operational guidance. It does not provide legal advice, audit certification, or a guarantee of compliance. Final determinations should be reviewed by qualified legal, security, privacy, audit, or compliance professionals.
Security
- Customer data is separated by organization, and database access is limited by row-level security.
- Source connections are read-only. Connector credentials are encrypted at rest.
- Traffic to the service uses TLS.
- Report a security incident to security@scm.cc. Breach notice for personal data is described in the privacy policy. This page does not add a response-time promise.
Availability and status
scm.cc does not publish an uptime percentage or a restore-time promise on this page.
scm.cc does not publish its own status site. Provider status pages and the service health check are linked below.
- Vercel status — Application host status
- Supabase status — Database and authentication status
- Cloudflare status — Edge status
- Service health check — a successful check is not an availability commitment.
Subprocessors
Vercel and Supabase publish that their infrastructure runs on AWS. This page does not add a separate AWS processing commitment. The privacy policy is the longer notice. Its subprocessor list matches this page.
Independent testing
No independent penetration test has been commissioned. A quote and a decision are still required before any test is purchased. This page does not record a pen-test result.
A customer organization can record vulnerability-scan evidence on a quarterly cadence in its observation window. That record is the customer's evidence. It is not a Persoon.ai Inc. scan report.