Authenticated access
The workspace requires authenticated access. Mission queries verify the signed-in owner before returning records.
Security & trust center
Your business context stays private, focused, and under your control.
Sclerite is designed for the information behind a consequential business decision. Access is verified, each review has a clear scope, and the resulting work remains tied to your private desk.
First Night Reviews are openSecure checkout and private customer intake are available
Private evidence storage
When file intake is certified and enabled, bytes enter owner- and mission-scoped private quarantine. Only clean originals and bounded derived artifacts move to separate private keys; the application creates no public evidence links.
Separated metadata
Mission records, file metadata, access identity, and integrity fingerprints are maintained separately from the original evidence objects.
Bounded authority
A submission authorizes analysis for that engagement only. It does not authorize publishing, purchases, external messages, or account changes.
Current evidence lifecycle
What happens after submission
- 1Identity is checked
The mission is tied to the authenticated account submitting it.
- 2Scope is recorded
The business question, report preference, delivery request, and analysis-only permission are written to the engagement record.
- 3Evidence is isolated
File intake remains unavailable unless both genuine scanning and isolated extraction are configured. Bytes enter private quarantine and must pass MIME, signature, archive, malware, and hash-binding checks.
- 4Raw files do not instruct analysis
The extraction service must return bounded units with page, sheet/cell, row, slide, region, or section locators. Automated analysis receives the normalized artifact—not the raw Office file.
- 5Work remains traceable
Intake, routing, analysis, quality, notification, retention, and delivery events are added to the engagement history.
- 6Delivery fails closed
Automated output must pass schema, source-locator, exact-question, contradiction, confidence, and instruction-containment gates. A failed gate routes the work to founder review.
Clear customer commitments
What you can expect from us
- No claim that a human professional reviewed an engagement unless that review actually occurred.
- No claim of a completed malware scan until an active scanning service has certified the file.
- No public evidence links or open customer document directory.
- No use of a submission as permission to act outside the workspace.
A clear role for technology
Sclerite uses artificial intelligence to support analysis. Automated work must pass structured quality checks, and anything that fails those checks is held for founder review. A report never claims human professional review unless that review actually occurred, and consequential decisions should still receive appropriate professional judgment.
Ongoing security work
How we keep strengthening the service
Security is ongoing work. We describe improvements plainly and do not present an unfinished control as a completed certification.
Key and access-control review Production scheduling and deletion-failure drills Genuine scanner/extractor corpus certification Privacy terms, incident process, and security testing