Security

Where Sopal runs, where your documents are kept, and who can see them.

Where the app runs
On Vercel, in Sydney (region syd1).
Where data is kept
The database and file storage are Supabase, in Sydney (ap-southeast-2).
The Computer
Each Computer task runs on its own isolated machine (Vercel Sandbox) in Sydney. It has no internet access out, and it is deleted when the task ends.
SopalAI
SopalAI runs under an enterprise agreement with OpenAI, with zero data retention switched on.
Who can see your documents
Documents are private to each organisation. Only the people your organisation invites can see them.
Signing in
Sign-in supports authenticator apps, including Microsoft Authenticator, Google Authenticator and 1Password. You are signed out automatically after 8 hours of inactivity.

Questions about security or data handling: info@sopal.com.au.