LOADIN READY

Security & Trust Center

Last updated: August 26, 2026

LoadIn Ready is designed for event and vendor operations where records may contain business contact details and compliance documents. This page describes controls currently built into the product; it is not a claim of an external certification.

Access controls

Every authenticated workspace request is checked against organization membership. Roles separate workspace owners, administrators, and members. Team role changes and removals are recorded in an access audit trail, and affected users receive security notifications.

Private files and vendor access

Compliance files are stored in a private bucket. Team downloads use short-lived signed links. Vendor portals use unique, revocable tokens so vendors do not need shared venue passwords. Files retain immutable submission versions for review history.

Data separation

Workspace records use database row-level security policies. Events, vendors, documents, conversations, integrations, and settings are scoped to the active organization. Service-level access is limited to backend operations that require it.

Application and transport security

The production service is available over HTTPS. Secrets are held in deployment environment settings rather than browser code. API credentials are stored as one-way hashes, and outbound webhooks are signed with HMAC-SHA256.

Operational safeguards

LoadIn Ready records document reviews, versions, event status changes, risk decisions, reminder deliveries, and team access changes. Account deletion removes owned workspace data and private uploads after billing is canceled.

Assisted document review

Document extraction is a reviewer aid. It does not approve insurance, deny a vendor, or replace a qualified broker, legal adviser, or venue manager. Extracted fields and rule findings are clearly marked as requiring human confirmation.

Service providers

Current core providers are Vercel for application hosting, Supabase for authentication and data storage, Resend for transactional email, Paddle as merchant of record, and OpenAI only when a workspace uses assisted document review.

Reporting a concern

Report suspected vulnerabilities or security incidents to support@loadinready.com. Please include the affected URL, steps to reproduce, and your contact information. Do not access or modify data that is not yours.

Compliance status

LoadIn Ready does not currently claim SOC 2, ISO 27001, HIPAA, PCI DSS, or other third-party certification. Payment card processing is handled by Paddle; LoadIn Ready does not store complete card numbers or card security codes.