Cloud infrastructure
The SAM application is hosted on Firebase (Google Cloud), including Firestore database and Cloud Functions for server-side logic. Marketing pages on workflowsecrets.ai are hosted separately on Vercel. Data in transit uses HTTPS.
Trust
Security practices you can verify
SAM runs on Google Cloud and Firebase with industry-standard authentication and access controls. We describe what we actually do — not certifications we have not earned.
Authentication & access
SAM uses Firebase Authentication for user sign-in. Team accounts support role-based security settings and section permissions so brokers and team leaders can control who accesses records and setup areas.
Your data & integrations
Account data is stored per customer in Firestore. Many integrations (OpenAI, Google Gemini, Twilio, etc.) use API keys you provide — those providers process data under their own terms when you connect them in Setup.
What we do not claim
We do not advertise SOC 2, HIPAA compliance, or other certifications unless and until formally obtained and verified. You are responsible for determining whether SAM meets regulatory requirements for your use case.
Reporting issues
If you discover a security concern, contact help@workflowsecrets.info with details. We review reports and respond as appropriate.
Questions about security?
Contact us — we answer honestly about what SAM does and does not certify.