Trust & Security

Last updated: 2026-07-20. Every claim here is something we actually do — nothing aspirational.

July 2026: the calculation engine went through a line-by-line internal table audit — every NEC table value cross-checked against published sources with golden tests pinning each cell, and coverage extended to NEC 705, 625, and 220 rule packs. ABYC E-11 (marine) tables are cited to and checked against published reproductions, but licensed marine-electrician sign-off is still in progress — marine outputs carry a DRAFT flag until that review completes. The full changelog lists what shipped and when.

Data security

·Row-Level Security (RLS) on every database table — you can only ever read or write your own projects.
·All traffic over TLS; HSTS enforced. Data stored in Supabase (Postgres) in us-west-1.
·We never store card numbers — payments run entirely through Stripe.
·Service-role credentials are server-only and never exposed to the browser.

Privacy

·Your designs are yours. Export (PDF/SVG/CSV) or delete your account and all data from Account Settings at any time.
·Product analytics (PostHog) use a hashed identifier — we don't put your email in event data.

Sub-processors

·Supabase (database, auth, storage) · Vercel (hosting) · Stripe (payments) · PostHog (analytics) · SiteGround (email) · Anthropic (optional AI assistant).

Compliance posture — read this honestly

·CircuitProof is not SOC 2 certified and does not claim to be. We'll say so plainly until we are.
·Generated reports are design documentation, not a P.Eng-stamped drawing. Verify with a licensed professional before installation.

Security contact

·Report a vulnerability or ask a question: powerlab@marinepowerlab.com. We respond within 3 business days.

A MarinePowerLab product.