Security and your data

Your Final Plan of Record holds some of the most sensitive facts about your business: your security plan, where your cameras are, who has keys. Here is plainly how Tofte handles it.

Your workspace is yours

Each business works in its own workspace. Database rules keep one workspace's records out of reach of every other workspace. Every draft, second read and suggestion is built only from your own workspace's documents, never anyone else's.

You decide who sees what

You choose who joins your workspace and what each person can do. Advisors you invite can read and comment, but they cannot run drafting.

AI that drafts, and people who decide

• Drafting uses Anthropic, and search uses OpenAI, both through their business APIs. Under those agreements, neither may use your data to train its models.
• Every drafted sentence has to quote a passage from your own documents. A quote that does not match the passage is removed, and the gap is flagged for you instead.
• Nothing is final until a person on your team approves it, and approval is tied to the exact words approved. Change the words and the approval comes off.
• When you or your own team drafts, restricted passages are sent along with everything else. If you do not want a document sent to an AI model at all, do not upload it.
• You never have to use drafting. Procedures, training, certificates, duties and logs all work without AI.

A record you can prove

Every version of a procedure is kept, with what changed, who changed it and when. Certificates cannot be edited or deleted by anyone, including you. Approvals and changes are written to an activity log. Every export carries a stamp calculated from its contents, so you can show later that the copy you handed over is the copy that came out of the system.

Where your data lives

Your records and files are stored with Supabase, running on Amazon Web Services, in Supabase's Frankfurt, Germany region. The website and server code run on Cloudflare. Data is encrypted in transit and at rest. The full list of the providers we use, and what each one receives, is in our Privacy Policy.

What we do not claim

Tofte does not hold a SOC 2 or similar certification yet. No online service can promise perfect security, and we will not pretend to. If you find a problem or have a question, email support@gettofte.com and Sam will answer you himself.