Security & Trust

Access requires sign-in. Live organization membership, project participation and role-based permissions govern access to project records. Participation in a shared workflow does not grant access to private architect or firm records.

Branding files, library files, employee photos and project images remain in private storage. Access is checked against current membership before files are retrieved or short-lived links are issued. Signed file links expire after 60 seconds; a file already downloaded cannot be recalled.

Ask Arc answers specification questions from selected clauses and points users back to the source. AI requests are routed through Lovable’s AI gateway to an OpenAI model and may be processed in the United States. Answers can be incomplete or inaccurate and require human review; AI does not replace professional judgment or make project decisions automatically.

Organization owners and administrators can turn AI Features off for their organization, and AI Features are off by default where no organization setting exists. When off, Project Arc blocks every AI request on its servers and sends no customer content to AI providers; non-AI search and normal functions remain available. Project Arc does not use Customer Data to train its own AI models. See the AI & Data Policy.

Core customer data at rest for current customers — the database, sign-in records and files in private storage — is stored with Supabase in its Canada (Central) region. Logs, network delivery and caching, email delivery, support and AI-assisted requests may involve providers in other countries, including the United States. A United States customer data environment is planned and is not yet generally available; a customer’s applicable storage region will be identified in its order form or service documentation. Storage location alone is not a claim of regulatory compliance.

Customers retain ownership of their project data. Authorized users can export available project records and documents as a readable archive, with exports recorded in project history.

Project Arc is available as a production service under its Terms of Use. This page describes implemented controls, not a certification or a guarantee of absolute security. Review the Terms of Use and AI & Data Policy for the current service conditions.

Contact Project Arc if you believe you have found a security issue. Do not include passwords or confidential project files, or access or change data that is not yours.

Project Arc Technologies
British Columbia, Canada
hello@projectarc.io
Contact Project Arc →