Your processes are your business. We treat them that way.
A plain-language account of how SOPCompass keeps your SOPs private, what we use to run it, and what we do not claim.
Row-level security per workspace
SOP content is stored in Supabase Postgres. Access rules are written as row-level security policies in the database itself, so each query only returns rows from workspaces the signed-in person belongs to. The interface hiding a button is never the only protection.
Roles that decide what people can change
Owners, admins, editors and viewers each have clear permissions, enforced by the same database policies. A library shared into another workspace is read-only there and can only be edited from its home workspace. A workspace cannot lose its last owner.
Private AI interviews
An AI interview is visible only to the person who started it. Admins and teammates cannot read someone else’s interview. What becomes shared is the SOP they choose to save.
Share links that expire and can be revoked
Public share links open one SOP, read-only, through a single database function. Links can expire after 7 or 30 days and can be revoked at any time, after which the page and any embeds stop working. Images and videos are stored at long random addresses, so someone who already copied a file’s own address could still open that file.
Version history
The last 50 versions of each SOP are kept, so accidental deletions and unwanted edits, including approved AI edits, can be restored.
Audio transcribed on your machine
When you import an audio recording, speech is transcribed in your browser. The audio file itself is not uploaded to draft the SOP; only the text transcript is used.
Billing never touches our servers
Subscriptions are purchased on Whop’s secure checkout. Your card number is entered with Whop and never passes through or is stored by SOPCompass.
How AI features handle your content
AI features send the content needed for a request, such as your interview answers, a document you import or the SOPs relevant to a question, to Anthropic’s API to generate a response. SOPCompass does not use your content to train AI models. Ask retrieves SOPs as the person asking, so answers only draw on what that person is allowed to see.
Services we use to run SOPCompass
- SupabaseDatabase, authentication and file storage
- AnthropicAI features (Claude) via Anthropic’s API
- ElevenLabsVoice mode for AI interviews
- ResendSign-in, invitation and notification emails
- GoogleSign in with Google, web fonts and website analytics
- Hugging FaceServes the speech model your browser downloads; your audio never goes to it
- WhopCheckout, subscriptions and billing
- VercelHosting for the application
- SlackOnly SOPCompass’s own internal workspaces; not used for customer workspaces
What we do not claim
SOPCompass is not currently SOC 2 audited or certified, is not HIPAA compliant, and does not hold a GDPR certification. We do not offer an uptime SLA. Please do not store protected health information, payment card data or similar regulated data in SOPs.
If your organization needs a security questionnaire answered or has specific requirements, email support@ironbridgeaiadvisory.com and we will give you straight answers.
Found a vulnerability? Please report it privately to support@ironbridgeaiadvisory.com.
Point every process the same way
Try SOPCompass free for 14 days. Interview the AI, import what you have and see your workspace come together.
14-day free trial, then from $99/month or $990/year, billed automatically until you cancel. Cancel anytime; access continues to the end of the paid period.