Trust Center
Security, privacy, and compliance summary for customers and security questionnaires. Operated by Negi Enterprise Inc (BC, Canada). Founder-maintained — not attorney-attested.
Product claims
We publish an honest feature inventory. BIM/3D, AI takeoff, and SSO/SAML are roadmap unless marked shipped. See in-repo docs/FEATURES.md and Help.
Security controls (summary)
- Authentication via Supabase; production ignores auth-off when cloud is configured
- Organization row-level security (RLS) on tenant data
- TLS in transit; encryption at rest via cloud providers
- Integration tokens encrypted at rest in production
- Signed bid-portal tokens; Stripe/DocuSign webhooks fail closed without secrets
- Audit log for material financial / portal actions; CSV export in Settings
Availability
Live flags: System status. Incident process: in-repo docs/INCIDENT_RESPONSE.md.
Legal pack
Contact
Negi Enterprise Inc · support@estilumina.com