Trust center
Company-private by design, explicit about the remaining gates.
Provider inventory reviewed October 8, 2026. A provider receives data only when its related feature is configured and used.
Current controls
- Company-scoped records, memberships, queries, private file keys, and database guard triggers.
- Role checks for administrators, managers, salespeople, accountants, and the platform owner.
- Secure server configuration for billing and integrations; secrets are not returned to the browser or company export.
- Expiring sign-in links, revocable sessions, audit-oriented import/delivery records, and human review for regulated outputs.
- Company administrators can download a database-record export and submit or cancel a reviewed closure request.
Service provider inventory
| Provider | Purpose | Data boundary |
|---|---|---|
| Cloudflare | Application delivery, server runtime, private database, and private object storage | Account, company, CRM, operational, and uploaded-file data needed to provide the service |
| Stripe | Trial conversion, subscription checkout, invoices, payment method portal, and billing webhooks | Company administrator identity, company billing identifiers, plan, and payment data entered directly with Stripe |
| Resend | Transactional login, invitation, customer, and platform email when enabled | Recipient email address and the requested message or secure link |
| Google Maps Platform | Address verification, mapping, distance, and route preparation when enabled | Origin, destination, and business address details submitted for the requested map action |
| Browser web-push providers | Device notifications requested by a signed-in user | Push endpoint, encryption keys, and notification content |
| OpenAI | Assistant and transcription features only when the company enables and invokes them | The submitted command, bounded screen/workflow context, and media required for the requested feature |
| Metrc | Authorized read-only synchronization only after state/vendor approval and company credential setup | Facility-scoped regulatory records requested by the approved integration |
External launch gates
Independent legal review, an independent security assessment, and Metrc/state vendor approval are external facts. They are not represented as complete until the responsible outside party finishes them. Internal automated tests, tenant guards, backups, restore rehearsals, and production acceptance reduce risk but do not replace independent review.
Report a concern
Send a suspected privacy or security issue to jcalvin@2cproduction.com. Do not include passwords, API keys, access tokens, full Social Security numbers, or payment-card information.