Security at CitationGuard

Your clients’ data is protected at every layer.
Here’s exactly how.

AES-256 Encryption
SOC 2 (In Progress)
GDPR Ready
99.9% Uptime SLA
🔐

Your data is encrypted everywhere

  • All data encrypted at rest using AES-256
  • All data encrypted in transit using TLS 1.3
  • API keys stored encrypted, never exposed in logs
  • Supabase infrastructure with enterprise-grade security
🏗️

Your clients’ data never touches another agency’s

  • Complete row-level security: every query filtered by your agency ID
  • No shared tables without strict user isolation
  • Even our own team cannot query your data without audit logging
🔑

You control who sees what

  • Role-based access: Owner, Admin, Manager, Viewer
  • Session management: see and revoke active sessions
  • 2FA coming Q3 2026
☁️

Built on infrastructure you already trust

  • Hosted on Vercel (SOC 2 Type II certified)
  • Database on Supabase (SOC 2 Type II certified)
  • AI processing via Groq (enterprise security)
  • All infrastructure in US/EU regions
📋

SOC 2 Type II — In Progress

Q1 2026Security controls implemented✅
Q2 2026Internal audit complete✅
Q3 2026Third-party audit scheduled🔄
Q4 2026SOC 2 Type II certified (target)⏳
🇪🇺

GDPR compliant by design

  • Data processing agreements available on request
  • Right to deletion: contact ahmedrafat666666666@gmail.com
  • Data portability: export all your data from Settings
  • Data residency: EU option available on Agency Pro
🛡️

Found a security issue?

We take all security reports seriously.

Email ahmedrafat666666666@gmail.com — we respond within 24 hours.

We do not pursue legal action against good-faith researchers.

© 2026 CitationGuard. All rights reserved.