Last updated: 6/2/2025
At Delegate, security isn't an afterthought—it's built into every aspect of our platform. We employ industry-leading security practices to protect your data and ensure your privacy.
All data transmitted between your browser and Firebase is encrypted using HTTPS/TLS. Communication with OpenAI's API also uses TLS encryption. We don't handle the encryption directly—it's provided by our service providers.
Your data is encrypted when stored in Firebase's Firestore database using Google's default encryption (AES-256). This encryption is automatically handled by Firebase— we don't manage the encryption keys ourselves.
Important: While Delegate itself doesn't hold independent security certifications, we inherit robust security protections from our certified service providers.
Our infrastructure runs on Google Cloud Platform and Firebase, which maintain SOC 2 Type II, ISO 27001, HIPAA, and other enterprise security certifications. We inherit these security benefits for our data storage and authentication.
Our AI processing uses OpenAI's APIs, which follow SOC 2 Type II compliance and enterprise security standards. Your data sent to AI services follows their data handling and privacy policies.
All communications use HTTPS encryption. Firebase provides automatic DDoS protection and Google's network security infrastructure protects our services.
We implement secure coding practices, regular security reviews, error monitoring with Sentry, and follow the principle of least privilege for data access.
Sandboxed Environment: All Python code runs in a secure, isolated browser environment using Pyodide.
Transparency Note: The compliance certifications below belong to our service providers (Firebase/Google Cloud and OpenAI). We benefit from their certified infrastructure but don't hold independent certifications ourselves.
We follow GDPR principles for data handling. Firebase and OpenAI are both GDPR-compliant, which helps us meet European data protection requirements.
Google Cloud Platform/Firebase and OpenAI maintain SOC 2 Type II compliance. We inherit these security controls through our use of their services.
Google Cloud Platform maintains ISO 27001 certification for information security management, which protects data stored in Firebase.
We conduct regular code reviews and security assessments of our application code, even though we rely on certified providers for infrastructure security.
If you discover a security vulnerability, please report it responsibly by contacting our security team. We take all security reports seriously and will respond promptly to address any issues.
Security Contact: hello@delegatewith.me
If you have questions about our security practices or need additional information, please don't hesitate to contact us. We're committed to transparency and will be happy to provide additional details about our security measures.
General Support: hello@delegatewith.me
Privacy Questions: privacy@delegatewith.me
Security Issues: hello@delegatewith.me
This security page is regularly updated to reflect our current practices and any changes to our security posture. For the most up-to-date information, please check back periodically.