Your data stays private. One workspace per institution.
ProverbAI gives each institution its own private workspace, admits people by invitation only and shows everyone only what their part in the review requires. This page sets out what is in place today and what is still to come.
Platform in testing
In place today
- A private workspace for each institution
- Passwordless sign-in by email code
- Access denied by default
- No tracking cookies or analytics
One institution, one ProverbAI workspace. Access shaped by your structure.
| Access | Sees | For |
|---|---|---|
| Oversight | Everything in your institution's workspace. | For the people you choose to lead the review: programs, invitations, deadlines, assignments and approvals. |
| Reviewing | Only the programs assigned to them. | Accept or adjust ProverbAI's review for those programs. |
| Program | Only the program they currently lead. | Submit the program's assessment plan, and see results only after your team approves them. |
Only the people your institution invites can sign in. Accreditors never need an account.
Invitation only. Your email is your login.
No one joins your ProverbAI workspace without an invitation. The people who lead each program are invited to that program, so access follows the program, not the individual.
One-time codes, no passwords
Sign in with your email address and a six-digit code that expires within an hour. There are no passwords to store, reuse or reset.
Invitations tied to one person and one access level
Each invitation names one email address and one access level, and expires after 14 days. Only that email address can accept it.
Access ends at handover
When a program's lead changes, the previous holder's access ends immediately. The program's records stay in place for their successor.
Stored in the United States. Three providers, clear roles.
Supabase
Database, authentication and file storage. Holds your workspace records, sign-in and submitted plans, hosted on Amazon Web Services in the United States.
Cloudflare
Website, application and review service. Serves this website and the ProverbAI application, and runs the review service. It also receives messages sent through our contact form.
Anthropic
AI model. Reads each plan for ProverbAI's review, through a secure link that expires after one hour.
Never used to train AI models
ProverbAI does not use your plans to train AI models. Plans are read only to review them for your institution.
No tracking cookies or analytics
This website sets no tracking cookies and runs no analytics. The application stores only your session and a few display preferences in your browser.
Cookies and storageKeep student records out of plans
Please remove identifiable student information, such as names with grades or samples of student work, before submitting a plan.
Restricted by default. Tested with every change.
Access denied by default
Access rules apply to every record, and permissions are checked server-side rather than trusted from the browser. Nothing is visible without signing in.
Institutions kept strictly apart
Every record belongs to one institution and can link only to records in the same institution. Automated tests on every change confirm that no one can reach another institution's data.
Private file storage
Plans are held in private storage, organized by institution and program, under the same access rules. A plan is visible only to the people with oversight, its assigned reviewer and the program's current lead.
Methodology isolated from the application
The review methodology runs only inside ProverbAI's review service, separate from the website and the application. Automated checks stop any release that would expose it.
A permanent activity log
Changes to programs, access, submissions, ProverbAI's reviews and approvals are logged with who made them and when. Neither the log nor a submitted plan can be edited, and only your two heads can read the log.
Encrypted in transit and at rest
All traffic is served over HTTPS. Stored data is encrypted at rest by Supabase and Cloudflare as part of their platforms; ProverbAI adds no separate encryption layer.
Still to come, stated plainly.
None of the following is available today. We will update this page as each one is in place.
- Single sign-on. Sign-in is by email and one-time code for now.
- Multi-factor authentication. Not yet available.
- Security certifications, such as SOC 2. ProverbAI does not yet hold any.
- An independent penetration test. Not yet completed.
- A data processing agreement. Not yet available. Tell us what your institution requires.
- Published retention periods. Being defined, together with data export at the end of a contract.
Security contact
For questions about this page, your IT office's security questionnaire, or to report a concern, write to hello@proverbai.io.
Questions from your security team? Talk to us.
ProverbAI is currently in private testing. We'll give you a clear account of what is in place today and what is still to come.